HelloWorld Modeling Rule

Details

ID	`HelloWorldModelingRule`
From Version	8.4.0

Rules (XIF)

[MODEL: dataset=hello_world_raw]
alter
    xdm.event.id = to_string(id),
    xdm.event.description = description,
    xdm.source.user.identifier = json_extract_scalar(custom_details, "$.triggered_by_uuid"),
    xdm.target.port = t_port,
    xdm.network.protocol_layers = arraycreate(protocol);

Schema

`hello_world_raw`

Field	Type	Array?
`created_time`	datetime	—
`custom_details`	string	—
`description`	string	—
`id`	int	—
`protocol`	string	—
`t_port`	int	—

Raw JSON

{
    "hello_world_raw": {
        "id": {
            "type": "int",
            "is_array": false
        },
        "t_port": {
            "type": "int",
            "is_array": false
        },
        "protocol": {
            "type": "string",
            "is_array": false
        },
        "description": {
            "type": "string",
            "is_array": false
        },
        "custom_details": {
            "type": "string",
            "is_array": false
        },
        "created_time": {
            "type": "datetime",
            "is_array": false
        }
    }
}