Calculates a entropy measure from a string of characters.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscale SyntaxshannonEntropy("value")
and:
logscale SyntaxshannonEntropy(field="value")
These examples show basic structure only.
shannonEntropy()
Examples
Shows how to calculate a shannon entropy value for the string
in a field. An input event with the field
dns_name with the
value example.com
results in the
field entropy having
the rounded value 3.095795.
logscale
entropy := shannonEntropy(dns_name)