Operator PredictiveBlacklistingFE

Specialized toolkits - release 4.3.1.0-prod20190605 > com.ibm.streams.cybersecurity 2.1.1 > com.ibm.streams.cybersecurity.extractors > PredictiveBlacklistingFE

Primitive operator image not displayed. Problem loading file: ../../image/tk$com.ibm.streams.cybersecurity/op$com.ibm.streams.cybersecurity.extractors$PredictiveBlacklistingFE.svg

The PredictiveBlacklistingFE operator ingests DNS response traffic and outputs a feature vector that is used by the PredictiveBlacklisting operator.

This operator is intended to be used in conjunction with the PredictiveBlacklisting operator.

Summary

Ports
This operator has 1 input port and 1 output port.
Windowing
This operator does not accept any windowing configurations.
Parameters
This operator supports 1 parameter.

Optional: enableIPCache

Metrics
This operator does not report any metrics.

Properties

Implementation
C++
Threading
Never - Operator never provides a single threaded execution context.

Input Ports

Ports (0)

Ingests tuples containing the DNS response records. Due to the number of attributes required by this operator, all input tuples should include the com.ibm.streams.cybersecurity.types::PBFeatureExtractorInput_t type. This type contains all of the attributes necessary to generate the feature vector.

Properties

Output Ports

Assignments
This operator allows any SPL expression of the correct type to be assigned to output attributes.
Output Functions
FE Functions
<any T> T AsIs()

The default function for output attributes. By default, this function assigns the output attribute to the value of the input attribute with the same name.

list<float64> getFeatureVector()

Returns the feature vector.

Ports (0)

Submits a tuple for each DNS response record received on input port 0. Custom output functions are used to specify the value of the output tuple attributes. The output tuple attributes whose assignments are not specified are assigned from the input attribute.

For convenience, the com.ibm.streams.cybersecurity.types::PredictiveBlacklisting_t type can be used as the output tuple type of this operator.

Properties

Parameters

Optional: enableIPCache

enableIPCache

When set to true, caches the result of converting string-based IP addresses to it's numeric equivalent. The default is set to false.

Properties

Libraries

No description for library.
Library Name: csa, re2
Library Path: ../../impl/lib/csa/, ../../impl/lib/re2/
Include Path: ../../impl/include/re2/, ../../impl/include/csa/, ../../impl/include/csa/pb/, ../../impl/include/