The seven Action types
The Event Transformation Action
In this lesson, we’ll cover:
- How the Event Transformation Action allows you to restructure the contents or timing of incoming events
- The different modes of the Action, one at a time:
message_only
: restructure previous event data, or add new context to itextract
: locate and extract specific text from fields in incoming eventsdeduplicate
: ignore events that you’ve already seen recentlydelay
: wait a specified duration before continuingexplode
: break a list of items for one-by-one processingimplode
: recombine a previously exploded list of items
Further reading
Check out the Event Transformation Action docs page for a full description of all capabilities and configuration options.