adds (input) field to the entry; overrides previous value if present (key=input, value=value).

add output field set to assignee if input field satisfies criteria from parameters field.

adds a field to the entry if the field does not exist.

add (input) field to list of labels with value taken from Value field (key=input, value=value).

add output field to list of labels with value taken from assignee field if input field satisfies criteria from parameters field.

add output field if input field satisfies regex pattern from parameters field.

define conditional sampling rules.

count.

End connection.

first.

Flow log.

Heartbeat.

last.

max.

min.

New connection.

sum.

JSON decoder.

Protobuf decoder.

set output field to average of parameters fields in the time window.

set output field to number of flows registered in the time window.

set output field to the difference of the first and last parameters fields in the time window.

set output field to last of parameters fields in the time window.

set output field to maximum of parameters fields in the time window.

set output field to minimum of parameters fields in the time window.

set output field to sum of parameters fields in the time window.

Crc32 balancer.

Hash balancer.

LeastBytes balancer.

Murmur2 balancer.

RoundRobin balancer.

counts samples in configurable buckets, pre-aggregated via an Aggregate stage.

monotonically increasing counter whose value can only increase.

filter key must be absent (filter value is ignored).

match exactly the provided filter value.

the value must be different from the provided filter.

the filter value must not match the provided regular expression.

filter key must be present (filter value is ignored).

match filter value as a regular expression.

single numerical value that can arbitrarily go up and down.

counts samples in configurable buckets.

add output kubernetes fields from input.

add output kubernetes isInfra field from input.

add output location fields from input.

add output network service field from input port and parameters protocol field.

add output subnet field from input field and prefix length from parameters field.

categorize IPs based on known subnets configuration.

reinterpret flow direction at the node level (instead of net interface), to ease the deduplication process.

adds new keys in addition to existing keys (default).

removes the entry if all of the defined rules are satisfied.

removes the entry if the field does not exist.

removes the entry if the field does not exist.

removes the entry if the field value equals specified value.

removes the entry if the field value equals specified value.

removes the entry if the field exists.

removes the entry if the field exists.

removes the entry if the field value does not equal specified value.

removes the entry if the field value does not equal specified value.

removes the field from the entry.

removes all old keys and uses only the new keys.

Plain SASL.

SCRAM/SHA512 SASL.

ConnTrackHash determines how to compute the connection hash.

Duration is a wrapper of time.Duration that allows json marshaling.