Combine Engine

The Combine ESP engine identifies related events in different tracks and creates an output track where the information from all of the tracks is combined into a single output record.

This engine differs from the And engine because:

  • It produces a single record for each record in the Input0 input track. This record contains copies of all related records from the other input track(s). In comparison, the And engine creates one output record for each pair of related records.
  • Every record from the Input0 track will appear in the output, even if there are no related records in the other input track(s).
Configuration Parameter Description
Input0 The first input track. The output track contains one record for every record in this track.
InputN The names of tracks that contain information that you want to combine with information from the input track specified by Input0.
LuaLine A Lua script that determines whether a record from an InputN track is included in the output.
LuaScript A Lua script that determines whether a record from an InputN track is included in the output.
TimestampCondition Specifies time limits for matching records, based on the record timestamps.
Type The type of ESP engine to use. Set this parameter to Combine.

Output Tracks

This engine produces a single output track, named TaskName.Output.