BlogA trigger is a powerful tool that expands the insights you can get from your wire data. You want to create custom metrics? A trigger can do that. Send data to a remote system? A trigger can do that. Extract data from proprietary protocols? Yeah, a trigger can do that.
Triggers are powerful, but they aren't free. If they aren't well-constructed, they can be extremely expensive. Triggers that try to do too much or aren't optimally scripted end up consuming unnecessary resources, throwing exceptions and errors, bumping other triggers from the queue, or delivering incorrect results.
To help you get the best performance out of your triggers, I've created a Triggers Best Practices Guide that includes the following collection of recommendations for planning, scripting, and assessing your triggers.
Trigger planning tips that help you answer questions about what you want the trigger to accomplish and help you pull together a configuration checklist for a focused, clear trigger.
Coding best practices that help you optimize trigger performance, which include general JavaScript recommendations and guidelines for working with ExtraHop Trigger API components and objects, such as session tables and records.
Trigger assessment recommendations that help you learn whether triggers are running as expected, find exceptions and errors, and evaluate the impact of triggers on the system.
So, start coding And let us know if there are any other trigger mysteries we can help unlock!