Execution Results
Typically, the results of algorithm execution are written to the index specified in the algorithm's input parameters (example).
General Structure of the JSON Result Object
The result object contains two main fields: _meta
and _calculation
.
_meta
Service information.
_meta.calculation.id
- the identifier of the algorithm setting in the profiling policy._meta.calculation.type
- the type of algorithm._meta.execution.start_time
- the time the profiling policy was launched._meta.execution.id
- the identifier of the profiling policy launch._meta.object.identity
- an array of UBA object identifiers for use in rules._meta.object.id
- the technical identifier of the UBA object.
_calculation
The content of the _calculation
field depends on the algorithm.
Metrics
In the indices with the results of algorithm execution, metric objects are found:
_calculation.extended_stats
- extended statistics._calculation.percentiles
- percentile.
Description of Fields with Metrics:
_calculation.extended_stats.count
- the number of documents participating in the metric calculation._calculation.extended_stats.min
- minimum._calculation.extended_stats.max
- maximum._calculation.extended_stats.avg
- average._calculation.extended_stats.sum
- sum._calculation.extended_stats.sum_of_squares
- sum of squares._calculation.extended_stats.variance
- variance._calculation.extended_stats.variance_population
- population variance._calculation.extended_stats.variance_sampling
- sample variance._calculation.extended_stats.std_deviation
- standard deviation._calculation.extended_stats.std_deviation_population
- population standard deviation._calculation.extended_stats.std_deviation_sampling
- sample standard deviation._calculation.extended_stats.std_deviation_bounds
- standard deviation bounds._calculation.extended_stats.std_deviation_bounds.upper
- upper standard deviation bound._calculation.extended_stats.std_deviation_bounds.lower
- lower standard deviation bound._calculation.extended_stats.std_deviation_bounds.upper_population
_calculation.extended_stats.std_deviation_bounds.lower_population
_calculation.extended_stats.std_deviation_bounds.upper_sampling
_calculation.extended_stats.std_deviation_bounds.lower_sampling
_calculation.percentiles.values.1.0
- first percentile._calculation.percentiles.values.5.0
- fifth percentile._calculation.percentiles.values.25.0
- twenty-fifth percentile._calculation.percentiles.values.50.0
- fiftieth percentile._calculation.percentiles.values.75.0
- seventy-fifth percentile._calculation.percentiles.values.95.0
- ninety-fifth percentile._calculation.percentiles.values.99.0
- ninety-ninth percentile.