The Event Transformation Action

In this lesson, we’ll cover: 

  • How the Event Transformation Action allows you to restructure the contents or timing of incoming events.

  • The different modes of the Action, one at a time:

    • message_only: restructure previous event data, or add new context to it

    • extract: locate and extract specific text from fields in incoming events

    • deduplicate: ignore events that you’ve already seen recently

    • delay: wait a specified duration before continuing

    • explode: break a list of items for one-by-one processing

    • implode: recombine a previously exploded list of items

Further reading 

Check out the Event Transformation Action docs page for a full description of all capabilities and configuration options.