Idea ID: 2743058

Add ability to aggregate string fields in connector aggregation

Status : Waiting for Votes
Waiting for Votes
See status update history
over 1 year ago

For example we have two events:

1. Event (username, sourceAddress, processName):

jack; 10.10.10.10; winlogon

2 Event (username, sourceAddress, processName):

jack; 10.10.10.10; explorer.exe

Add ability to aggregate them on connector level into one Event (username, sourceAddress, processName):

jack; 10.10.10.10; winlogon|explorer.exe.

I think this ability would be useful.

Tags: