You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, the configuration of an output field of a connection supports a boolean flag splitAB to control whether to split the aggregation by direction.
For example, the following configuration:
outputFields:
- name: Bytes
operation: sum
splitAB: false
will add a single Bytes field to a connection which sums the bytes of flows from A to B and from B to A.
On the other hand, the following configuration
outputFields:
- name: Bytes
operation: sum
splitAB: true
will add two fields (Bytes_AB and Bytes_BA) to the connection which sums the bytes separately for A->B and B->A respectively.
If we want to allow both splitted and unsplitted sums, and end up with 3 additional fields in the connection (Bytes, Bytes_AB and Bytes_AB), we need to write:
outputFields:
- name: Bytes
operation: sum
splitAB: true
- name: Bytes
operation: sum
splitAB: false
We need to think if we want to make the configuration more compact and clear.
Also, do we want to allow aggregation of only one direction but not the other?
If so, 2 options come to mind:
@ronensc can we go with an enum approach that for the emit field (instead of splitAB) supports the following "AB" (only split), "Totals" (only totals), "AB&Totlas" (that emits both the split values and the totals). I think that splitting just on one of the sides is not very reasonable.
Currently, the configuration of an output field of a connection supports a boolean flag
splitAB
to control whether to split the aggregation by direction.For example, the following configuration:
will add a single
Bytes
field to a connection which sums the bytes of flows from A to B and from B to A.On the other hand, the following configuration
will add two fields (
Bytes_AB
andBytes_BA
) to the connection which sums the bytes separately for A->B and B->A respectively.If we want to allow both splitted and unsplitted sums, and end up with 3 additional fields in the connection (
Bytes
,Bytes_AB
andBytes_AB
), we need to write:We need to think if we want to make the configuration more compact and clear.
Also, do we want to allow aggregation of only one direction but not the other?
If so, 2 options come to mind:
splitAB
with 3 booleans:splitAB
with a list:The text was updated successfully, but these errors were encountered: