- name: usage_trigger debug_level: 2 distinguished_by: - instance_id - timestamp: "day" expiration: "$last + 2d" fire_pipeline: "usage_fire_pipeline" expire_pipeline: "usage_expire_pipeline" match_criteria: - event_type: - compute.instance.* - snapshot_instance - keypair.import.* - rebuild_instance - compute.instance.* - "!compute.instance.exists" - event_type: compute.instance.exists map_distingushed_by: timestamp: audit_period_beginning fire_criteria: - event_type: compute.instance.exists traits: audit_period_ending: datetime: $audit_period_beginning + 1d