Skip to main content

The seven Action types

The Event Transformation Action

In this lesson, we’ll cover:

  • How the Event Transformation Action allows you to restructure the contents or timing of incoming events
  • The different modes of the Action, one at a time:
    • message_only: restructure previous event data, or add new context to it
    • extract: locate and extract specific text from fields in incoming events
    • deduplicate: ignore events that you’ve already seen recently
    • delay: wait a specified duration before continuing
    • explode: break a list of items for one-by-one processing
    • implode: recombine a previously exploded list of items

Further reading

Check out the Event Transformation Action docs page for a full description of all capabilities and configuration options.