Creates a Bloom filter context.
context::create_bloom_filter name:string, capacity=int, fp_probability=floatDescription
Section titled “Description”The context::create_bloom_filter operator constructs a new context of type
Bloom filter.
To find suitable values for the capacity and false-positive probability, consult
Thomas Hurst’s Bloom Filter Calculator. The
parameter n corresponds to capacity and p to fp_probability.
You can also create a Bloom filter context as code by adding it to
tenzir.contexts in your tenzir.yaml:
tenzir: contexts: my-iocs: type: bloom-filter arguments: capacity: 1B fp-probability: 0.001Making changes to arguments of an already created context has no effect.
name: string
Section titled “name: string”The name of the new Bloom filter.
capacity = uint
Section titled “capacity = uint”The maximum number of items in the filter that maintain the false positive probability. Adding more elements does not yield an error, but lookups will more likely return false positives.
fp_probability = float
Section titled “fp_probability = float”The false-positive probability of the Bloom filter.
Examples
Section titled “Examples”Create a new Bloom filter context
Section titled “Create a new Bloom filter context”context::create_bloom_filter "ctx", capacity=1B, fp_probability=0.001