@@ -541,6 +541,77 @@ FROM k8s
541541;
542542
543543
544+ same key and value column
545+ required_capability: change_point
546+
547+ FROM k8s
548+ | STATS count=COUNT() BY BUCKET(@timestamp, 1 MINUTE)
549+ | KEEP count
550+ | CHANGE_POINT count ON count AS type, pvalue
551+ ;
552+
553+ count:long | type:keyword | pvalue:double
554+ 4 | null | null
555+ 4 | null | null
556+ 4 | null | null
557+ 5 | null | null
558+ 5 | null | null
559+ 5 | null | null
560+ 5 | null | null
561+ 7 | null | null
562+ 7 | null | null
563+ 8 | null | null
564+ 8 | null | null
565+ 8 | null | null
566+ 8 | trend_change | 3.793633808495355E-12
567+ 9 | null | null
568+ 9 | null | null
569+ 9 | null | null
570+ 10 | null | null
571+ 10 | null | null
572+ 11 | null | null
573+ 12 | null | null
574+ 15 | null | null
575+ 17 | null | null
576+ 20 | null | null
577+ ;
578+
579+
580+ all four columns the same
581+
582+ FROM k8s
583+ | STATS count=COUNT() BY BUCKET(@timestamp, 1 MINUTE)
584+ | KEEP count
585+ | CHANGE_POINT count ON count AS count, count
586+ ;
587+
588+ count:double
589+ null
590+ null
591+ null
592+ null
593+ null
594+ null
595+ null
596+ null
597+ null
598+ null
599+ null
600+ null
601+ 3.793633808495355E-12
602+ null
603+ null
604+ null
605+ null
606+ null
607+ null
608+ null
609+ null
610+ null
611+ null
612+ ;
613+
614+
544615rename columns
545616required_capability: change_point
546617
@@ -578,6 +649,44 @@ time:datetime | cnt:long | kind:keyword | significance:double
5786492024-05-10T00:22:00.000Z | 9 | null | null
579650;
580651
652+
653+ null keys
654+ required_capability: change_point
655+
656+ FROM k8s
657+ | STATS count=COUNT() BY @timestamp=BUCKET(@timestamp, 1 MINUTE)
658+ | EVAL @timestamp=CASE(@timestamp=="2024-05-10T00:04:00.000Z", NULL, @timestamp)
659+ | EVAL @timestamp=CASE(@timestamp=="2024-05-10T00:08:00.000Z", NULL, @timestamp)
660+ | EVAL count=count+CASE(@timestamp<="2024-05-10T00:11:00.000Z", 100, 0)
661+ | CHANGE_POINT count ON @timestamp AS type, pvalue
662+ ;
663+
664+ @timestamp:datetime | count:long | type:keyword | pvalue:double
665+ 2024-05-10T00:00:00.000Z | 104 | null | null
666+ 2024-05-10T00:01:00.000Z | 104 | null | null
667+ 2024-05-10T00:02:00.000Z | 108 | null | null
668+ 2024-05-10T00:03:00.000Z | 108 | null | null
669+ 2024-05-10T00:05:00.000Z | 108 | null | null
670+ 2024-05-10T00:06:00.000Z | 110 | null | null
671+ 2024-05-10T00:07:00.000Z | 105 | null | null
672+ 2024-05-10T00:09:00.000Z | 120 | null | null
673+ 2024-05-10T00:10:00.000Z | 105 | null | null
674+ 2024-05-10T00:11:00.000Z | 107 | null | null
675+ 2024-05-10T00:12:00.000Z | 8 | step_change | 9.678892139828202E-24
676+ 2024-05-10T00:13:00.000Z | 9 | null | null
677+ 2024-05-10T00:14:00.000Z | 9 | null | null
678+ 2024-05-10T00:15:00.000Z | 11 | null | null
679+ 2024-05-10T00:16:00.000Z | 7 | null | null
680+ 2024-05-10T00:17:00.000Z | 15 | null | null
681+ 2024-05-10T00:18:00.000Z | 17 | null | null
682+ 2024-05-10T00:19:00.000Z | 5 | null | null
683+ 2024-05-10T00:20:00.000Z | 10 | null | null
684+ 2024-05-10T00:21:00.000Z | 4 | null | null
685+ 2024-05-10T00:22:00.000Z | 9 | null | null
686+ null | 12 | null | null
687+ null | 5 | null | null
688+ ;
689+
581690null values
582691required_capability: change_point
583692
@@ -799,6 +908,43 @@ time:integer | val:integer | type:keyword | pvalue:double
799908;
800909
801910
911+ keys null column
912+ required_capability: change_point
913+
914+ ROW key=NULL, value=[1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1]
915+ | MV_EXPAND value
916+ | CHANGE_POINT value ON key
917+ ;
918+
919+ key:null | value:integer | type:keyword | pvalue:double
920+ null | 1 | null | null
921+ null | 1 | null | null
922+ null | 1 | null | null
923+ null | 1 | null | null
924+ null | 1 | null | null
925+ null | 1 | null | null
926+ null | 1 | null | null
927+ null | 1 | null | null
928+ null | 1 | null | null
929+ null | 1 | null | null
930+ null | 1 | null | null
931+ null | 1 | null | null
932+ null | 1 | null | null
933+ null | 1 | null | null
934+ null | 1 | null | null
935+ null | 1 | null | null
936+ null | 1 | null | null
937+ null | 1 | null | null
938+ null | 1 | null | null
939+ null | 1 | null | null
940+ null | 1 | null | null
941+ null | 1 | null | null
942+ null | 1 | null | null
943+ null | 1 | null | null
944+ null | 1 | null | null
945+ ;
946+
947+
802948values null column
803949required_capability: change_point
804950
0 commit comments