Split action

This action splits one field into substrings and copies them to other fields in the same object.

  • Input fields

    The object field to split.

  • Regex tags

    The string pattern to split on, such as / or ::

  • Output fields

    Copy substrings to the following fields, in order.

 

Example

Your monitoring service generates events with a "database" tag like this:

{
    ...
    "tags": {
        "database": "myNamespace_myCluster_myDBname"
    }
}

You want to split the namespace, cluster, and database name into separate tags. You configure your Split action like this:

  • Input fields = tags.database

  • Regex tags = _

  • Output fields = tags.namespace, tags.cluster, tags.database

Event Before

EventAfter

{
  "tags": {
    "database": "myNamespace_myCluster_myDBname"
  }
} 
{
  "tags": {
    "namespace": "myNamespace",
    "cluster": "myCluster",
    "database": "myDatabase"
  }
}