This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

E

Elasticsearch

ELFF

Entity

Event

Events

Explorer tree

Expression tree

1 - Elasticsearch

Elasticsearch is an Open Source and commercial search index product. Stroom can be connected to one or more Elasticsearch clusters so that event indexing and search is handled by Elasticsearch rather than internally.

2 - ELFF

The Extended Log File Format. A W3C standard format for log files produced by web servers.

3 - Entity

Typically refers to an item that can be created in the Explorer Tree, e.g. a Feed, a Pipeline, a Dashboard, etc. May also be known as a Document.

4 - Event

An event is a single auditable event, e.g. a user logging in to a system. A Stream typically contains multiple events.

In a Raw Events an event is typically represented as block of XML or JSON, a single line for CSV data. In an Events Stream an event is identified by its Event ID which its position in that stream (as a one-based number). The Event ID combined with a Stream ID provide a unique identifier for an event within a Stroom instance.

5 - Events

This is a Stream Type in Stroom. An Events stream consists of processed/cooked data that has been demarcated into individual Events.

Typically in Stroom an Events stream will contain data conforming to the event-logging XML Schema which provides a normalised form for all Raw Events to be transformed into.

6 - Explorer tree

The left hand navigation tree. The Explorer Tree is used for finding, opening, creating, renaming, copying, moving and deleting Documents.

It can also be used to control the access permissions of entities and folders. The tree can be filtered using the quick filter, see Finding Things for more details.

7 - Expression tree

A tree of expression terms that each evaluate to a boolean (True/False) value. Terms can be grouped together within an expression operator (AND, OR, NOT).

For example:

AND (
  Feed is CSV_FEED
  Type = Raw Events
)

Expression Trees are used in Processor Filters and Query expressions.