This processor monitors a string field and counts how often the value of the string changes. Hereby, a change is characterized by the value of the field before and the value after the change, combined forming a pair. The processor keeps track of the counter for each pair.
A string field is required in the data stream and can be selected with the field mapping.
The string field to be monitored.
(no further configuration required)
The following three fields are appended to the event:
The event is emitted whenever the value of the string field changes.