Aggregates information across multiple events received during an interval of time. Produces new events representing the aggregated information. Can also store historical information into external database tables and produce real-time reports.
Sessionizes a stream of HTTP request events (or clickstream hits) by grouping them into page views and sessionizes. Appends additional session attributes to the request events and produces two new types of events, one each for page views and sessions.
Performs a hashing algorithm on a content field and uses the result to populate a urn:vocab:clickstream#content-id field. This Reactor controls which content is stored in the Pion Replay database.
Uses rules to detect patterns within visitor sessions. Events for a session are queued in memory until a match is found. If a match is found, all the session's events are passed through as output to other Reactors. If no match is found, the events are discarded.
Passively sniffs network packets, reassembles TCP and decrypts SSL/TLS. Protocol plugins allow you to generate events from any type of network traffic.
Uses Database plugins to perform real-time SQL queries derived from the events that it receives. The results of the queries can be used to add additional information to the original event.
Creates new events which are derived from the events that it receives. This can be used to create entirely new types of complex events (for example, to signify that a pattern has been detected), or to derive new attributes which are based on attributes in existing events (i.e. assign a new attribute to "Internet Explorer" if an existing attribute contains "MSIE").
