TRIX is a new events correlation function (the “new generation” of the previous transaction function) that builds complex events correlated by different keys and display results in new dedicated screens.
...
trix.uniqueIds.fields unique and strong column name must be present in the complex event (CE). It can open a CE, it can connect to another CE, and it will pull CE that only has weak keys - mandatory
optional parameters:
trix.uniqueSubIds.fields uniqueSubId column name is not mandatory in the complex event (CE). It can open a CE, it can be added to another CE that has a uniqueId key, it can not connect two uniqueId CEs, uniqueSubId should not close an event.
...
startRule a filter query to denote a start condition, such as: startRule = (action = login or operator login OR operator = login)
endRule a filter query to denote an end condition, such as: endRule = (action = logout or operator logout OR operator = logout)
cepNode.maxEventLimit max number of events per CE.
cepNode.timeframe.limit a CE should be closed after limitTime has expired.
cepNode.event.timeframe.limitFromStart a CE should not add events that are more than limitTimeFromStart from the first event.