Previous Topic: Enrich Property—Create New Event Properties From Retrieved PropertiesNext Topic: Normalize Property—Transforms Event Property Values

Writing Connector Policy › Policy Operations › Normalize Operation

Normalize Operation

Normalize operations transform the syntax of event property values to give values from all sources a uniform nomenclature. For example, you may want to map several similar severity property values (Ok, Success, Good, and so on) to Normal for uniformity purposes.

You can write normalize operations based on the following types of transformation:

Normalize operations support inheritance. The normalize operation process traverses all normalization policy field elements in order from top to bottom until all field elements are processed. Matches are recorded and processed.