Structure
STRUCTURE { matcher_expr … }
The STRUCTURE allows capturing any sequence of matchers in tuple data type.
| output type | quantifier | configuration |
|---|---|---|
tuple | none | none |
You must assign an export name to STRUCTURE to make exported members visible for the query layer.
Example
Consider the following data, where we have an integer and string value, separated by a comma on each line:
11,red fox jumps22,over lazy dog
Pattern:
1STRUCTURE{ INT:i ',' LD:string }:struct EOL;
Parsing results with integer and string values extracted:
| struct |
|---|
{i=1 string='red fox jumps '} |
{i=2 string='over lazy dog'} |