org.graylog2.indexer.results.TermsHistogramResult Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of graylog2-server Show documentation
Graylog
There is a newer version: 6.0.5
/**
 * This file is part of Graylog.
 *
 * Graylog is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Graylog is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Graylog.  If not, see .
 */
package org.graylog2.indexer.results;

import com.google.common.collect.Maps;
import io.searchbox.core.search.aggregation.DateHistogramAggregation;
import io.searchbox.core.search.aggregation.MissingAggregation;
import io.searchbox.core.search.aggregation.TermsAggregation;
import org.graylog2.indexer.searches.Searches;
import org.graylog2.plugin.Tools;
import org.graylog2.plugin.indexer.searches.timeranges.AbsoluteRange;
import org.joda.time.DateTime;

import javax.annotation.Nullable;
import java.util.Collections;
import java.util.HashSet;
import java.util.List;
import java.util.Map;
import java.util.Set;

public class TermsHistogramResult extends IndexQueryResult {
    private final long size;
    private final Searches.DateHistogramInterval interval;
    private final Map result;
    private final HashSet terms;
    private AbsoluteRange boundaries;

    public TermsHistogramResult(@Nullable DateHistogramAggregation result, String originalQuery, String builtQuery, long size, long tookMs, Searches.DateHistogramInterval interval, List fields) {
        super(originalQuery, builtQuery, tookMs);
        this.size = size;
        this.interval = interval;
        this.result = Maps.newTreeMap();
        this.terms = new HashSet<>();

        if (result != null) {
            for (DateHistogramAggregation.DateHistogram histogram : result.getBuckets()) {
                final DateTime keyAsDate = new DateTime(histogram.getKey());
                final TermsAggregation termsAggregation = histogram.getFilterAggregation(Searches.AGG_FILTER).getTermsAggregation(Searches.AGG_TERMS);
                final MissingAggregation missingAgregation = histogram.getMissingAggregation("missing");
                final TermsResult termsResult = new TermsResult(termsAggregation, missingAgregation.getMissing(), histogram.getCount(), "", "", tookMs, fields);

                this.terms.addAll(termsResult.getTerms().keySet());
                this.result.put(keyAsDate.getMillis() / 1000L, termsResult);
            }
        }
    }

    public long getSize() {
        return size;
    }

    public Searches.DateHistogramInterval getInterval() {
        return interval;
    }

    public Map getResults() {
        return this.result;
    }

    public Set getTerms() {
        return this.terms;
    }

    /*
     * Extract from and to fields from the built query to determine
     * histogram boundaries.
     */
    @Nullable
    public AbsoluteRange getHistogramBoundaries() {
        if (boundaries == null) {
            boundaries = Tools.extractHistogramBoundaries(getBuiltQuery()).orElse(null);
        }

        return boundaries;
    }

    public static TermsHistogramResult empty(String originalQuery, String builtQuery, long size, Searches.DateHistogramInterval interval) {
        return new TermsHistogramResult(null, originalQuery, builtQuery, size, 0L, interval, Collections.emptyList());
    }
}