Expand Events

Expand Events (expand-events)

expand a single JSON document into multiple JSON events.

Transform json

Minimal example

actions:
  - expand-events:
      skip-list: []

JSON

{
  "actions": [
    {
      "expand-events": {
        "skip-list": []
      }
    }
  ]
}

Contents

• Minimal example

• General

• Input

• Output

• Warnings

A ✓ marks a field that accepts a context variable such as {{ VARIABLE }}.

General

General

Field	Type	Required	Description
description	string		describe this step.
condition	lua-expression (string)		Only run this action if the specified condition is met. Examples: 2 * count()

Input

Input

Field	Type	Required	Description
input-field	field (string)		Field containing the payload to expand. Examples: data_field

Output

Output

Field	Type	Required	Description
remove ✓	boolean (bool)		Remove the source field after expansion. Default: false
output-split-field	field (string)		Field used to emit each expanded record. Examples: data_field
skip-list	regex[] (string)	✅	JSON Pointer patterns (regex) to skip flattening when event-expand. Examples: \d+[A-Z]*
exclude-non-empty-arrays ✓	boolean (bool)		Exclude all arrays that are not empty after expansion. Default: false

Warnings

Warnings

Field	Type	Required	Description
suppress-warnings ✓	boolean (bool)		Suppress warnings generated by this action. Default: false