Calculates a entropy measure from a string of characters.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscale SyntaxshannonEntropy("value")
and:
logscale SyntaxshannonEntropy(field="value")
These examples show basic structure only.
shannonEntropy()
Examples
Shows how to calculate a shannon entropy value for the string in a
field. An input event with the field
dns_name with the value
example.com
results in the field
entropy having the rounded value
3.095795.
logscale
entropy := shannonEntropy(dns_name)