Command Types

There are 2 primary types of commands, and a few sub-types.

• Source commands produce a stream of events on their own. They must be used as the first command in a search.
• Stage commands take a stream of events from another command and transform it into a new stream of events. They cannot be used as the first command in a search.
  • Aggregation some stage commands aggregate multiple events into a single event. these commands may block the stream until they have enough data to produce an output event.