Aggregator Node

Group the results from the preceding runbook node by a specific metric, or apply an operation on the metrics forwarded from that node.

The supported aggregation operations are:

  • min

  • max

  • average

  • count (distinct values of a string)

  • sum

These aggregation operations are context-sensitive (e.g., count is the only operation available for the Client IP metric).

An Aggregator node can follow a Data Query node or a Decision Branch node; the preceding node must output summarized data, not time series data. Metrics are collected from the last preceding Data Query node.

For each aggregator node, specify whether the corresponding data will be presented by all metrics all together (the default), or grouped by a single specified metric. You can select which metrics to include, and the aggregation operation to be performed on each.

Properties

Node LabelType an informative name for the Aggregator node. You can keep the system-provided default of "Aggregator" if you wish.

DebugSelect Debug if you want to receive debug data when the node executes.

Grouping

Specify whether data from the preceding node is presented by all metrics all together (the default), or grouped by a single specified metric.

Metrics

Select which metrics to include, and the aggregation operation to be performed on each.

Runbook Compatibility

Incident, On-Demand, External (Webhook), Subflow