Get Variable Filter

Definition

Description

If event matches Condition, get the value of Variable and assign it to FieldName.

 

 

Comments

If Variable or FieldName parameters are missing or invalid, the filter is disabled.

According to the VariableName and the VariableScope parameters, a full variable name is generated.

This variable can also be accessed as a variable array with an empty string ("") as its index.

 

Example

<filter disabled="False" objectId="get" type="GetVariableFilter">
	<parameter autoSetDescription="true" comments="Add comments for Condition..." description="Match all Events" type="Condition">
		<negatePrimaryCondition>false</negatePrimaryCondition>
		<conditionRelation>All</conditionRelation>
	</parameter>
	<parameter type="Variable">ecs0:var</parameter>
	<parameter type="FieldName">ev:msg</parameter>
</filter>