base/frameworks/sumstats/plugins/last.zeek

SumStats

Keep the last X observations.

Namespace:SumStats
Imports:base/frameworks/sumstats, base/utils/queue.zeek

Summary

Redefinitions

SumStats::Calculation: enum
SumStats::Reducer: record
New Fields:

SumStats::Reducer

num_last_elements: count &default = 0 &optional

Number of elements to keep.

SumStats::ResultVal: record
New Fields:

SumStats::ResultVal

last_elements: Queue::Queue &optional

This is the queue where elements are maintained.

Functions

SumStats::get_last: function Get a vector of element values from a ResultVal.

Detailed Interface

Functions

SumStats::get_last
Type:function (rv: SumStats::ResultVal) : vector of SumStats::Observation

Get a vector of element values from a ResultVal.