本文整理汇总了Python中elastalert.ruletypes.FrequencyRule.add_terms_data方法的典型用法代码示例。如果您正苦于以下问题:Python FrequencyRule.add_terms_data方法的具体用法?Python FrequencyRule.add_terms_data怎么用?Python FrequencyRule.add_terms_data使用的例子?那么恭喜您, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在类elastalert.ruletypes.FrequencyRule
的用法示例。
在下文中一共展示了FrequencyRule.add_terms_data方法的2个代码示例,这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞,您的评价将有助于系统推荐出更棒的Python代码示例。
示例1: test_freq_terms
# 需要导入模块: from elastalert.ruletypes import FrequencyRule [as 别名]
# 或者: from elastalert.ruletypes.FrequencyRule import add_terms_data [as 别名]
def test_freq_terms():
rules = {'num_events': 10,
'timeframe': datetime.timedelta(hours=1),
'query_key': 'username'}
rule = FrequencyRule(rules)
terms1 = {ts_to_dt('2014-01-01T00:01:00Z'): [{'key': 'userA', 'doc_count': 1},
{'key': 'userB', 'doc_count': 5}]}
terms2 = {ts_to_dt('2014-01-01T00:10:00Z'): [{'key': 'userA', 'doc_count': 8},
{'key': 'userB', 'doc_count': 5}]}
terms3 = {ts_to_dt('2014-01-01T00:25:00Z'): [{'key': 'userA', 'doc_count': 3},
{'key': 'userB', 'doc_count': 0}]}
# Initial data
rule.add_terms_data(terms1)
assert len(rule.matches) == 0
# Match for user B
rule.add_terms_data(terms2)
assert len(rule.matches) == 1
assert rule.matches[0].get('username') == 'userB'
# Match for user A
rule.add_terms_data(terms3)
assert len(rule.matches) == 2
assert rule.matches[1].get('username') == 'userA'
示例2: test_freq_terms
# 需要导入模块: from elastalert.ruletypes import FrequencyRule [as 别名]
# 或者: from elastalert.ruletypes.FrequencyRule import add_terms_data [as 别名]
def test_freq_terms():
rules = {"num_events": 10, "timeframe": datetime.timedelta(hours=1), "query_key": "username"}
rule = FrequencyRule(rules)
terms1 = {ts_to_dt("2014-01-01T00:01:00Z"): [{"key": "userA", "doc_count": 1}, {"key": "userB", "doc_count": 5}]}
terms2 = {ts_to_dt("2014-01-01T00:10:00Z"): [{"key": "userA", "doc_count": 8}, {"key": "userB", "doc_count": 5}]}
terms3 = {ts_to_dt("2014-01-01T00:25:00Z"): [{"key": "userA", "doc_count": 3}, {"key": "userB", "doc_count": 0}]}
# Initial data
rule.add_terms_data(terms1)
assert len(rule.matches) == 0
# Match for user B
rule.add_terms_data(terms2)
assert len(rule.matches) == 1
assert rule.matches[0].get("username") == "userB"
# Match for user A
rule.add_terms_data(terms3)
assert len(rule.matches) == 2
assert rule.matches[1].get("username") == "userA"