RE: [ask] create profile for profiler with multiple fields on foreach

[Anil Donthireddy]

Hi,

The expression provided in foreach statement is not valid. It should resolve to 
single object string.

Thanks,
Anil.

From: Youzha [mailto:yuza.ras...@gmail.com]
Sent: Wednesday, July 17, 2019 9:17 PM
To: user@metron.apache.org
Subject: [ask] create profile for profiler with multiple fields on foreach

Hi,

it is possible to use multiple fields inside foreach on profiler ?

i’ve try using AND like below but it failed. pls help


{

  "profiles": [

    {

      "profile": "hello-world",

      "onlyif":  "exists(ip_src_addr) AND exists(ip_dst_addr)",

      "foreach": "ip_src_addr AND ip_dst_addr,

      "init":    { "count": "0" },

      "update":  { "count": "count + 1" },

      "result":  "count"

    }

  ]

}