Add anomaly detection transform stage (EWMA + Z-score)

Author: vatankh

.idea/.gitignore

@@ -3,20 +3,22 @@ log-level: info
 pipeline:
   - name: ingest
   - name: detect-anomaly
+    follows: ingest
   - name: write
+    follows: detect-anomaly
 parameters:
   - name: ingest
     ingest:
       type: synthetic
       synthetic:
-        records: 10
+        flowLogsPerMin: 10
   - name: detect-anomaly
     transform:
       type: anomaly
       anomaly:
         algorithm: zscore
-        valueField: bytes
-        keyFields: [srcIP, dstIP, proto]
+        valueField: Bytes
+        keyFields: [SrcAddr, DstAddr, Proto]
         windowSize: 20
         baselineWindow: 5
         sensitivity: 3