Command Types

There are 3 primary types of commands.

  • Source commands produce a stream of events on their own. They must be used as the first command in a search.
    • These commands will spawn a pool of workers to perform operations in parallel
  • Stage commands perform an operation on a single event
    • These commands will not spawn any additional workers
  • Blocking commands aggregate multiple events into a single event. These commands may block the stream of events until they have enough data to produce an output event.
    • These commands will spawn a pool of workers to perform operations in parallel