SumStats NamespaceΒΆ

Namespace: SumStats.

class zlogging.enum.SumStats.Calculation(value)[source]

Bases: IntFlag

Enum: SumStats::Calculation.

Type to represent the calculations that are available. The calculations are all defined as plugins.

See also

base/frameworks/sumstats/main.zeek

PLACEHOLDER = 1
AVERAGE = 2

(present if base/frameworks/sumstats/plugins/average.zeek is loaded) Calculate the average of the values.

HLL_UNIQUE = 4

(present if base/frameworks/sumstats/plugins/hll_unique.zeek is loaded) Calculate the number of unique values.

LAST = 8

(present if base/frameworks/sumstats/plugins/last.zeek is loaded) Keep last X observations in a queue.

MAX = 16

(present if base/frameworks/sumstats/plugins/max.zeek is loaded) Find the maximum value.

MIN = 32

(present if base/frameworks/sumstats/plugins/min.zeek is loaded) Find the minimum value.

SAMPLE = 64

(present if base/frameworks/sumstats/plugins/sample.zeek is loaded) Get uniquely distributed random samples from the observation stream.

VARIANCE = 128

(present if base/frameworks/sumstats/plugins/variance.zeek is loaded) Calculate the variance of the values.

STD_DEV = 256

(present if base/frameworks/sumstats/plugins/std-dev.zeek is loaded) Calculate the standard deviation of the values.

SUM = 512

(present if base/frameworks/sumstats/plugins/sum.zeek is loaded) Calculate the sum of the values. For string values, this will be the number of strings.

TOPK = 1024

(present if base/frameworks/sumstats/plugins/topk.zeek is loaded) Keep a top-k list of values.

UNIQUE = 2048

(present if base/frameworks/sumstats/plugins/unique.zeek is loaded) Calculate the number of unique values.