Group lists

You can use group lists to normalize values that are detected in the capture stream to internally meaningful values. For example, if your enterprise underwent two mergers recently, you may want to create a dimension that uses a group list to normalize the names of each company (Company A and Company B) to the name of the current organization (Company C).

A dimension can be populated by one or more group lists. A group list is a specified value (value to record) and an associated list of values that, when detected, are recorded as the specified group value. A dimension can be populated by one or more group lists. These lists may be manually specified or generated from log values.

  • A group list is not the same thing as a whitelist. Use a whitelist to specify individual values that are permitted and recorded as the original value. See Whitelists and blacklists.