| Help : Query : Parameter : resultField |
Results returned as a table containing whichever columns were requested using resultField.
| Field Definitions | ||
|---|---|---|
| Category | Field | Description |
| Key Field | time | The time at the start of the interval. |
| seconds | The time at the start of the interval in seconds since 1 Jan 1970 GMT. | |
| serverAddress | Source address. | |
| serverName | Domain name of source. | |
| serverPort | Source port. | |
| serverPortName | "Well known" port name for source port. | |
| clientAddress | Destination address. | |
| clientName | Domain name of destination. | |
| clientPort | Destination port. | |
| clientPortName | "Well known" port name for destination port. | |
| protocolGroup | Name for service identified by source and destination ports (Configured using protocol.group setting). | |
| Value Field | frames | Number of frames in interval for given keys. |
| framesVariance | Variance in the number of frames. | |
| framesSDEV | Standard deviation in the number of frames. | |
| framesLower | Lower bound (95% confidence) on the number of frames. | |
| framesUpper | Upper bound (95% confidence) on the number of frames. | |
| framesIn | Number of frames into server in interval for given keys. | |
| framesInVariance | Variance in the number of frames into server. | |
| framesInSDEV | Standard deviation in the number of frames into server. | |
| framesInLower | Lower bound (95% confidence) on the number of frames into server. | |
| framesInUpper | Upper bound (95% confidence) on the number of frames into server. | |
| framesOut | Number of frames out of server in interval for given keys. | |
| framesOutVariance | Variance in the number of frames out of server. | |
| framesOutSDEV | Standard deviation in the number of frames out of server. | |
| framesOutLower | Lower bound (95% confidence) on the number of frames out of server. | |
| framesOutUpper | Upper bound (95% confidence) on the number of frames out of server. | |
| bytes | Number of bytes in interval for given keys. | |
| bytesVariance | Variance in the number of bytes. | |
| bytesSDEV | Standard deviation in the number of bytes. | |
| bytesLower | Lower bound (95% confidence) on the number of bytes. | |
| bytesUpper | Upper bound (95%) confidence) on the number of bytes. | |
| bytesIn | Number of bytes into server in interval for given keys. | |
| bytesInVariance | Variance in the number of bytes into server. | |
| bytesInSDEV | Standard deviation in the number of bytes into server. | |
| bytesInLower | Lower bound (95% confidence) on the number of bytes into server. | |
| bytesInUpper | Upper bound (95%) confidence) on the number of bytes into server. | |
| bytesOut | Number of bytes out of server in interval for given keys. | |
| bytesOutVariance | Variance in the number of bytes out of server. | |
| bytesOutSDEV | Standard deviation in the number of bytes out of server. | |
| bytesOutLower | Lower bound (95% confidence) on the number of bytes out of server. | |
| bytesOutUpper | Upper bound (95%) confidence) on the number of bytes out of server. | |
| count(key1,key2..) | Count the number of distinct key values and collapse the
rows, returning the count. For example, resultField=serverAddress,count(clientAddress,clientPort) will return the server addresses along with a count of the number of client connections. |
|
If key fields are omitted, then the result will be aggregated, ensuring that each row represents a unique combination of keys.
Result fields are specified as a list of field names. For example,
resultField=serverAddress,clientAddress,frames,bytes would return a table with the specified columns.