String matching on stream data

In this example will use the stream node the Function node. Stream node is configured the same way as in one of the previous examples. We will use sequence formula, as described here

For this example, we will try to fetch from stream data entries that have udp values for the protocol metric.

<sequence([udp], GLOBAL.protocol)> with threshold value 1, so that the Equal state captures that event (since only in that case formula evaluates to 1)

Payload that will be sending is

  "protocol": "udp"