Interface Function<T>
- All Known Implementing Classes:
Abbreviate
,AbstractFunction
,AbstractPeriodComponentFunction
,AbuseChRansomDomainLookupFunction
,AbuseChRansomIpLookupFunction
,Base16Decode
,Base16Encode
,Base32Decode
,Base32Encode
,Base32HumanDecode
,Base32HumanEncode
,Base64Decode
,Base64Encode
,Base64UrlDecode
,Base64UrlEncode
,BooleanConversion
,Capitalize
,CEFParserFunction
,CidrMatch
,CloneMessage
,Concat
,Contains
,CRC32
,CRC32C
,CreateMessage
,DateConversion
,Days
,Debug
,DoubleConversion
,DropMessage
,EndsWith
,FirstNonNull
,FlexParseDate
,FormatDate
,FromInput
,GlobalDomainLookupFunction
,GlobalIpLookupFunction
,GrokExists
,GrokMatch
,HasField
,Hours
,IpAddressConversion
,IsBoolean
,IsCollection
,IsDate
,IsDouble
,IsIp
,IsJson
,IsList
,IsLong
,IsMap
,IsNotNull
,IsNull
,IsNumber
,IsPeriod
,IsString
,IsUrl
,Join
,JsonFlatten
,JsonParse
,KeyValue
,Length
,LongConversion
,Lookup
,LookupAddStringList
,LookupAssignTtl
,LookupClearKey
,LookupHasValue
,LookupRemoveStringList
,LookupSetStringList
,LookupSetValue
,LookupStringList
,LookupStringListContains
,LookupTableFunction
,LookupValue
,Lowercase
,MapConversion
,MD5
,MetricCounterIncrement
,Millis
,Minutes
,Months
,Murmur3_128
,Murmur3_32
,NormalizeFields
,Now
,OTXDomainLookupFunction
,OTXIPLookupFunction
,ParseDate
,ParseUnixMilliseconds
,PeriodParseFunction
,PrivateNetLookupFunction
,RegexMatch
,RegexReplace
,RemoveField
,RemoveFromStream
,RenameField
,Replace
,RouteToStream
,Seconds
,SelectJsonPath
,SetField
,SetFields
,SHA1
,SHA256
,SHA512
,SpamhausIpLookupFunction
,Split
,StartsWith
,StringConversion
,StringEntropy
,StringUtilsFunction
,Substring
,Swapcase
,SyslogFacilityConversion
,SyslogLevelConversion
,SyslogPriorityConversion
,SyslogPriorityToStringConversion
,TimezoneAwareFunction
,TorExitNodeLookupFunction
,TrafficAccountingSize
,Uncapitalize
,Uppercase
,UrlConversion
,UrlDecode
,UrlEncode
,Weeks
,WhoisLookupIpFunction
,Years
public interface Function<T>
-
Field Summary
Modifier and TypeFieldDescriptionstatic final Function
static final com.swrve.ratelimitedlogger.RateLimitedLog
-
Method Summary
Modifier and TypeMethodDescriptionevaluate
(FunctionArgs args, EvaluationContext context) preComputeConstantArgument
(FunctionArgs args, String name, Expression arg) Implementations should provide a non-null value for each argument they wish to pre-compute.default void
preprocessArgs
(FunctionArgs args)
-
Field Details
-
log
static final com.swrve.ratelimitedlogger.RateLimitedLog log -
ERROR_FUNCTION
-
-
Method Details
-
preprocessArgs
-
preComputeConstantArgument
Implementations should provide a non-null value for each argument they wish to pre-compute.
Examples include compile a Pattern from a regex string, which will never change during the lifetime of the function. If any part of the expression tree depends on external values this method will not be called, e.g. if the regex depends on a message field.- Parameters:
args
- the function args for this functions, usually you don't need thisname
- the name of the argument to potentially precomputearg
- the expression tree for the argument- Returns:
- the precomputed value for the argument or
null
if the value should be dynamically calculated for each invocation
-
evaluate
-
descriptor
FunctionDescriptor<T> descriptor()
-