HelloWorld Modeling Rule

Details

ID	`HelloWorld_ModelingRule`
From Version	8.15.0

Schema

`hello_world_raw`

Field	Type	Array?
`created_time`	datetime	—
`custom_details`	string	—
`description`	string	—
`id`	int	—
`protocol`	string	—
`t_port`	int	—

Source

HelloWorldModelingRules_2_11.xif HelloWorldModelingRules_2_11.yml HelloWorldModelingRules_2_11_schema.json

Download History Raw

[MODEL: dataset=hello_world_raw]
alter
    xdm.event.id = to_string(id),
    xdm.event.description = description,
    xdm.source.user.identifier = json_extract_scalar(custom_details, "$.triggered_by_uuid"),
    xdm.source.identity.identifier = json_extract_scalar(custom_details, "$.triggered_by_uuid"),
    xdm.target.port = t_port,
    xdm.network.protocol_layers = arraycreate(protocol);