org.graylog2.indexer.results.FieldHistogramResult Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of graylog2-server Show documentation
Graylog
There is a newer version: 6.0.5
/**
 * This file is part of Graylog.
 *
 * Graylog is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Graylog is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Graylog.  If not, see .
 */
package org.graylog2.indexer.results;

import com.google.common.collect.ImmutableMap;
import com.google.common.collect.Maps;
import io.searchbox.core.search.aggregation.CardinalityAggregation;
import io.searchbox.core.search.aggregation.HistogramAggregation;
import io.searchbox.core.search.aggregation.StatsAggregation;
import io.searchbox.core.search.aggregation.ValueCountAggregation;
import org.graylog2.indexer.searches.Searches;
import org.joda.time.DateTime;
import org.joda.time.DateTimeZone;
import org.joda.time.MutableDateTime;

import java.util.Collections;
import java.util.Map;

public class FieldHistogramResult extends HistogramResult {
    private static final Map EMPTY_RESULT = ImmutableMap.builder()
            .put("count", 0)
            .put("min", 0)
            .put("max", 0)
            .put("total", 0)
            .put("total_count", 0)
            .put("mean", 0)
            .build();

    private final Map> result;
    private final Searches.DateHistogramInterval interval;

    public FieldHistogramResult(HistogramAggregation histogramAggregation, String originalQuery, String builtQuery, Searches.DateHistogramInterval interval, long tookMs) {
        super(originalQuery, builtQuery, tookMs);

        this.interval = interval;
        this.result = getResultsFromHistogramAggregation(histogramAggregation);
    }

    @Override
    public Searches.DateHistogramInterval getInterval() {
        return interval;
    }

    @Override
    public Map getResults() {
        return result;
    }

    private Map> getResultsFromHistogramAggregation(HistogramAggregation histogramAggregation) {
        if (histogramAggregation.getBuckets().isEmpty()) {
            return Collections.emptyMap();
        }

        final Map> results = Maps.newTreeMap();
        for (HistogramAggregation.Histogram b : histogramAggregation.getBuckets()) {
            final ImmutableMap.Builder resultMap = ImmutableMap.builder();
            resultMap.put("total_count", b.getCount());

            final StatsAggregation stats = b.getStatsAggregation(Searches.AGG_STATS);
            if (stats != null) {
                resultMap.put("count", stats.getCount() == null ? 0L : stats.getCount());
                resultMap.put("min", stats.getMin() == null ? 0D : stats.getMin());
                resultMap.put("max", stats.getMax() == null ? 0D : stats.getMax());
                resultMap.put("total", stats.getSum() == null ? 0D : stats.getSum());
                resultMap.put("mean", stats.getAvg() == null ? 0D : stats.getAvg());
            } else {
                // Get count from count aggregation if stats aggregation was not requested
                final ValueCountAggregation count = b.getValueCountAggregation(Searches.AGG_VALUE_COUNT);
                resultMap.put("count", count == null ? 0L : count.getValueCount());
                resultMap.put("min", Double.NaN);
                resultMap.put("max", Double.NaN);
                resultMap.put("total", Double.NaN);
                resultMap.put("mean", Double.NaN);
            }

            final CardinalityAggregation cardinality = b.getCardinalityAggregation(Searches.AGG_CARDINALITY);
            resultMap.put("cardinality", cardinality == null ? 0 : cardinality.getCardinality());

            final DateTime keyAsDate = new DateTime(b.getKey());
            final long timestamp = keyAsDate.getMillis() / 1000L;
            results.put(timestamp, resultMap.build());
        }

        fillEmptyTimestamps(results);
        return results;
    }

    private void fillEmptyTimestamps(Map> results) {
        final long minTimestamp = Collections.min(results.keySet());
        final long maxTimestamp = Collections.max(results.keySet());
        final MutableDateTime currentTime = new MutableDateTime(minTimestamp, DateTimeZone.UTC);

        while (currentTime.getMillis() < maxTimestamp) {
            final Map entry = results.get(currentTime.getMillis());

            // advance timestamp by the interval
            currentTime.add(interval.getPeriod());

            if (entry == null) {
                // synthesize a 0 value for this timestamp
                results.put(currentTime.getMillis(), EMPTY_RESULT);
            }
        }
    }

    private FieldHistogramResult(String originalQuery, String builtQuery, Searches.DateHistogramInterval interval) {
        super(originalQuery, builtQuery, 0);

        this.result = Collections.emptyMap();
        this.interval = interval;
    }
    public static HistogramResult empty(String originalQuery, String builtQuery, Searches.DateHistogramInterval interval) {
        return new FieldHistogramResult(originalQuery, builtQuery, interval);
    }
}