Struct LogsArithmeticProcessor 

#[non_exhaustive]
pub struct LogsArithmeticProcessor {
    pub expression: String,
    pub is_enabled: Option<bool>,
    pub is_replace_missing: Option<bool>,
    pub name: Option<String>,
    pub target: String,
    pub type_: LogsArithmeticProcessorType,
    pub additional_properties: BTreeMap<String, Value>,
    /* private fields */
}

Use the Arithmetic Processor to add a new attribute (without spaces or special characters in the new attribute name) to a log with the result of the provided formula. This enables you to remap different time attributes with different units into a single attribute, or to compute operations on attributes within the same log.

The formula can use parentheses and the basic arithmetic operators -, +, *, /.

By default, the calculation is skipped if an attribute is missing. Select “Replace missing attribute by 0” to automatically populate missing attribute values with 0 to ensure that the calculation is done. An attribute is missing if it is not found in the log attributes, or if it cannot be converted to a number.

Notes:

• The operator - needs to be space split in the formula as it can also be contained in attribute names.
• If the target attribute already exists, it is overwritten by the result of the formula.
• Results are rounded up to the 9th decimal. For example, if the result of the formula is 0.1234567891, the actual value stored for the attribute is 0.123456789.
• If you need to scale a unit of measure, see Scale Filter.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

expression: String

Arithmetic operation between one or more log attributes.

is_enabled: Option<bool>

Whether or not the processor is enabled.

is_replace_missing: Option<bool>

If true, it replaces all missing attributes of expression by 0, false skip the operation if an attribute is missing.

name: Option<String>

Name of the processor.

target: String

Name of the attribute that contains the result of the arithmetic operation.

type_: LogsArithmeticProcessorType

Type of logs arithmetic processor.

additional_properties: BTreeMap<String, Value>

Implementations

impl LogsArithmeticProcessor

pub fn new( expression: String, target: String, type_: LogsArithmeticProcessorType, ) -> LogsArithmeticProcessor

pub fn is_enabled(self, value: bool) -> Self

pub fn is_replace_missing(self, value: bool) -> Self

pub fn name(self, value: String) -> Self

pub fn additional_properties(self, value: BTreeMap<String, Value>) -> Self

Trait Implementations

impl Clone for LogsArithmeticProcessor

fn clone(&self) -> LogsArithmeticProcessor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LogsArithmeticProcessor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for LogsArithmeticProcessor

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for LogsArithmeticProcessor

fn eq(&self, other: &LogsArithmeticProcessor) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for LogsArithmeticProcessor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for LogsArithmeticProcessor