githubEdit

Derivation Rules

Deriving Data

Derivation rules provide the ability to transform inbound data or existing data from Data Sources to create new sets of data.

New Derivation Rule window

Condition

The Condition field is an optional field used to determine if a rule will execute. The condition is inserted as a JEXL expressionarrow-up-right wrapped in ${}. If the value returned by the expression is true, the rule will execute. If the value returns false or null the rule will be skipped.

The following is an example of a valid condition for a Derivation Rule:

Expression

This required field accepts a JEXL template string used to derive the value of the field. The following is an example of a valid expression which will concatenate the values of the three inputs with underscores:

If RegEx Field is defined, this field will instead be treated as a Regular Expression and will be applied to the value of the field selected in the RegEx Field. For example, if RegEx was defined as hostname, the following expression would extract the first word from the hostname.

RegEx Field

This field contains a searchable dropdown list populated with all the field names already mapped for this data source. If a field is selected the Expression field will be treated as a Regular Expression (RegEx), rather than a JEXL template string. The input for the RegEx expression is the selected field.

Last updated

Was this helpful?