Source > NormalizingRules

Defines rules for modifying incoming events.

For more information about normalizing rules, see section "Adding normalizing rules".

Path

InputSettings > RegExps > Source > NormalizingRules

Attributes

This element has no attributes.

Nested elements

This element is a container for the following nested elements:

• Replace

  These elements specify replacing rules.

• Ignore

  These elements specify ignoring rules.

NormalizingRules > Replace

Defines a replacing rule.

This element has the following attributes.

Replace element attributes

Attribute	Description
input	Specifies a regular expression for the rule.
output	Specifies the replacement sequence.

NormalizingRules > Ignore

Defines an ignoring rule

This element has the following attributes.

Ignore element attributes

Attribute	Description
input	Specifies a regular expression for the rule.

Example

The following is an example of this element.

<NormalizingRules> <Replace input="^\<(\d+)\>" output="NEW_EVENT\:\1\s" /> <Ignore input="Device0002" /> </NormalizingRules>

Page top