Operator PredictiveBlocklistingFE
The PredictiveBlocklistingFE operator ingests DNS response traffic and outputs a feature vector that is used by the PredictiveBlocklisting operator.
This operator is intended to be used in conjunction with the PredictiveBlocklisting operator.
Summary
- Ports
- This operator has 1 input port and 1 output port.
- Windowing
- This operator does not accept any windowing configurations.
- Parameters
- This operator supports 1 parameter.
Optional: enableIPCache
- Metrics
- This operator does not report any metrics.
Properties
- Implementation
- C++
- Threading
- Never - Operator never provides a single threaded execution context.
- Ports (0)
-
Ingests tuples containing the DNS response records. Due to the number of attributes required by this operator, all input tuples should include the com.teracloud.streams.cybersecurity.types::PBFeatureExtractorInput_t type. This type contains all of the attributes necessary to generate the feature vector.
- Properties
-
- Optional: false
- ControlPort: false
- TupleMutationAllowed: true
- WindowingMode: NonWindowed
- WindowPunctuationInputMode: Oblivious
- Assignments
- This operator allows any SPL expression of the correct type to be assigned to output attributes.
- Output Functions
-
- FE Functions
-
- <any T> T AsIs()
-
The default function for output attributes. By default, this function assigns the output attribute to the value of the input attribute with the same name.
- list<float64> getFeatureVector()
-
Returns the feature vector.
- Ports (0)
-
Submits a tuple for each DNS response record received on input port 0. Custom output functions are used to specify the value of the output tuple attributes. The output tuple attributes whose assignments are not specified are assigned from the input attribute.
For convenience, the com.teracloud.streams.cybersecurity.types::PredictiveBlocklisting_t type can be used as the output tuple type of this operator.
- Properties
-
- Optional: false
- TupleMutationAllowed: true
- WindowPunctuationOutputMode: Generating
Optional: enableIPCache
- enableIPCache
-
When set to true, caches the result of converting string-based IP addresses to it's numeric equivalent. The default is set to false.
- Properties
-
- Type: boolean
- Cardinality: 1
- Optional: true
- ExpressionMode: Constant
- No description for library.