Hi, You have only two streams ('bro.in.ssh.log:1.0.0 and bro.out.ssh.log:1.0.0). In this case you are using attribute name as "id.orig_h". In Siddhi definition we can't give attribute name as like that. You can not use . (full stop) in our attribute definition. You can use _ (underscore).
Thanks. Best Regards, Yashothara.S Software Engineer WSO2 On Fri, Jun 17, 2016 at 11:34 AM, Aneela Safdar <ansaf_...@yahoo.com> wrote: > Hi, > > I am a newbie here and trying to write a simple siddhi query by simply > importing a custom mapped stream. But as soon as I import it and validate > query, it gives above error. > > My complete query however is > > @Import('bro.in.ssh.log:1.0.0') > define stream inStream (ts string, uid string, id.orig_h string, id.orig_p > int, id.resp_h string, id.resp_p int, version int, client string, server > string, cipher_alg string, mac_alg string, compression_alg string, kex_alg > string, host_key_alg string, host_key string); > > @Export('bro.out.ssh.log:1.0.0') > define stream outStream (ts string, ssh_logins int); > > from inStream > select dateFormat (ts,'yyyy-MM-dd HH:mm') as formatedTs, count > group by formatedTs > insert into outStream; > > All I want to do is to count number of records in a log for a single > minute and export that time and count to an output Stream. But I am getting > errors even at the very first line. > > Regards, Aneela Safdar > > _______________________________________________ > Dev mailing list > Dev@wso2.org > http://wso2.org/cgi-bin/mailman/listinfo/dev > >
_______________________________________________ Dev mailing list Dev@wso2.org http://wso2.org/cgi-bin/mailman/listinfo/dev