Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel1
maxLevel6
outlinefalse
typeflat
printablefalse

Scores events in the input table according to whether the specified column (a double) has a spike. The scores are higher for events that with a spike in the specified column.

...

Code Block
scoreSpikes(inputTable, column)

Example

Input

lhub_ts

bytes_in

02/04/2018 06:40:00

256

02/04/2018 06:41:00

256

02/04/2018 06:42:00

256

02/04/2018 06:43:00

256

02/04/2018 06:44:00

1028

02/04/2018 06:45:00

1028

02/04/2018 06:46:00

1028

LQL command

Code Block
scoreSpikes(table, "bytes_in")

Output

lhub_ts

bytes_in

lhub_score

02/04/2018 06:40:00

256

0.0

02/04/2018 06:41:00

256

0.0

02/04/2018 06:42:00

256

0.0

02/04/2018 06:43:00

256

0.0

02/04/2018 06:44:00

1028

10.0

02/04/2018 06:45:00

1028

0.0

02/04/2018 06:46:00

1028

0.0