[SERVICE] Flush 1 Grace 2 Log_Level info [INPUT] Name dummy Dummy {"r1": "someval", "s1": {"s2": null}, "r2": {"x": 0}} Samples 1 [FILTER] Name expect Match * Log_Level debug # Rules key_exists $r1 key_not_exists $r0 key_val_is_null $s1['s2'] key_val_is_not_null $r2['x'] key_val_eq $r1 someval action exit [OUTPUT] Name exit Match *