Generates temporary events as part of the query and is ideal for generating sample data for testing or troubleshooting. It is regarded as an aggregator function and, therefore, discards all incoming events and outputs the generated ones. The events are generated with no extracted fields but createEvents() can, advantageously, be combined with one of the many parsers. For example, given raw strings in the format of key/value pairs, the pairs can be parsed to fields using the kvParse() function.

ParameterTypeRequiredDefault ValueDescription
rawstring[a]stringrequired   Specification of events to emit. Each event is given as a @rawstring which is not processed further.

[a] The parameter name rawstring can be omitted.

Hide omitted argument names for this function

Show omitted argument names for this function

Click + next to an example below to get the full details.

Create Two Temporary Events for Troubleshooting - Example 1

Create two temporary events for testing or troubleshooting using the createEvents() function

Create Two Temporary Events for Troubleshooting - Example 2

Create two temporary events for testing or troubleshooting using the createEvents() function with parseJson()

Create Two Temporary Events for Troubleshooting - Example 3

Create two temporary events for testing or troubleshooting using the createEvents() function with kvParse()

Generate Temporary Event With Bit Flags For Troubleshooting

Generate temporary events with the createEvents() function as part of the query to generate sample data for testing or troubleshooting

Perform a Free-Text Search in Rawstring

Perform a free-text search in a rawstring using the createEvents() function