Last Modified : 08 August 2026
Raw Event Data Template
The
Raw Event Data Template
passes the trigger output through without any parsing or transformation.
The entire byte array is stored as a single field named
raw in the event data.
How It Works
- The trigger produces a byte array (e.g., arbitrary text from a custom trigger).
- The raw template wraps the entire byte array into a single event data field.
-
The field is always named
rawand contains the full, unmodified content.
The raw template is the simplest option. Use it when you don't need
structured parsing and just want to capture the trigger's output
as-is.