> > > 1. Since the CoFlatMap function works on a single event, how do we > evaluate rules that require aggregations across events. (Match rule if more > than 5 A events happen) > 2. Since the CoFlatMap function works on a single event, how do we > evaluate rules that require pattern detection across events (Match rule if > A happens, followed by B). > > You function maintain a state which is an automata for evaluating your rules. ( events are the edges in your automata)
> > 1. How do you dynamically define a window function. > > function cannot be dynamicaly changed. I this rule is the arguments of your function, function change the behavior according your rule. > > > > > -- > Aarti Gupta <https://www.linkedin.com/company/qualys> > Director, Engineering, Correlation > > > aagu...@qualys.com > T > > > Qualys, Inc. – Blog <https://qualys.com/blog> | Community > <https://community.qualys.com> | Twitter <https://twitter.com/qualys> > > > <https://www.qualys.com/email-banner> >
