delete_sig
Purpose
delete_sig completely deletes a component of the signature to improve match rates. This transform removes a specified key from the signature's hashmap, allowing you to exclude certain elements that may be causing match failures during replay.
To learn more about how signatures work and when to use this transform, read the Signature Refinement Guide.
Usage
"type": "delete_sig",
"config": {
"key": "<string>"
}
- key - the key in the signature's hashmap to delete
Example
Before and After Example
Configuration
{
"type": "delete_sig",
"config": {
"key": "<signature key to delete>"
}
}
Example Chains
empty() -> delete_sig(key="http:method")
This will delete the HTTP method from the request signature.
empty() -> delete_sig(key="http:url")
This will delete the endpoint component from the signature, allowing requests with different endpoints to match this signature.
Before (Signature with All Components)
{
"http:method": "POST",
"http:url": "/api/v1/orders",
"http:requestBodyJSON": "timestamp=1234567890|session=abc123",
"content_type": "application/json",
"body_hash": "a8f5f167f44f4964e6c998dee827110c"
}
After (Signature with http:requestBodyJSON Deleted)
{
"http:method": "POST",
"http:url": "/api/v1/orders",
"content_type": "application/json",
"body_hash": "a8f5f167f44f4964e6c998dee827110c"
}
By removing the http:requestBodyJSON component, requests with different request bodies will now match the same signature, improving replay match rates.