- begin: time
The time when the first observation was added to
this result value.
- end: time
The time when the last observation was added to
this result value.
- num: count &default = 0 &optional
The number of observations received.
- average: double &optional
(present if base/frameworks/sumstats/plugins/average.bro is loaded)
For numeric data, this calculates the average of all values.
- hll_unique: count &default = 0 &optional
(present if base/frameworks/sumstats/plugins/hll_unique.bro is loaded)
If cardinality is being tracked, the number of unique
items is tracked here.
- card: opaque &optional
(present if base/frameworks/sumstats/plugins/hll_unique.bro is loaded)
- hll_error_margin: double &optional
(present if base/frameworks/sumstats/plugins/hll_unique.bro is loaded)
- hll_confidence: double &optional
(present if base/frameworks/sumstats/plugins/hll_unique.bro is loaded)
- last_elements: Queue::Queue &optional
(present if base/frameworks/sumstats/plugins/last.bro is loaded)
This is the queue where elements are maintained. Use the
SumStats::get_last function to get a vector of
the current element values.
- max: double &optional
(present if base/frameworks/sumstats/plugins/max.bro is loaded)
For numeric data, this tracks the maximum value given.
- min: double &optional
(present if base/frameworks/sumstats/plugins/min.bro is loaded)
For numeric data, this tracks the minimum value given.
- samples: vector &default = vector() &optional
(present if base/frameworks/sumstats/plugins/sample.bro is loaded)
This is the vector in which the samples are maintained.
- sample_elements: count &default = 0 &optional
(present if base/frameworks/sumstats/plugins/sample.bro is loaded)
Number of total observed elements.
- num_samples: count &default = 0 &optional
(present if base/frameworks/sumstats/plugins/sample.bro is loaded)
- variance: double &optional
(present if base/frameworks/sumstats/plugins/variance.bro is loaded)
For numeric data, this calculates the variance.
- prev_avg: double &optional
(present if base/frameworks/sumstats/plugins/variance.bro is loaded)
- var_s: double &default = 0.0 &optional
(present if base/frameworks/sumstats/plugins/variance.bro is loaded)
- std_dev: double &default = 0.0 &optional
(present if base/frameworks/sumstats/plugins/std-dev.bro is loaded)
For numeric data, this calculates the standard deviation.
- sum: double &default = 0.0 &optional
(present if base/frameworks/sumstats/plugins/sum.bro is loaded)
For numeric data, this tracks the sum of all values.
- topk: opaque &optional
(present if base/frameworks/sumstats/plugins/topk.bro is loaded)
- unique: count &default = 0 &optional
(present if base/frameworks/sumstats/plugins/unique.bro is loaded)
If cardinality is being tracked, the number of unique
items is tracked here.
- unique_max: count &optional
(present if base/frameworks/sumstats/plugins/unique.bro is loaded)
- unique_vals: set [SumStats::Observation] &optional
(present if base/frameworks/sumstats/plugins/unique.bro is loaded)