I want a stateful CardinalityRule rule evaluator for ElastAlert rules, constructed as…
I want a stateful CardinalityRule rule evaluator for ElastAlert rules, constructed as…: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). For a max-cardinality session with {'max cardinality': 4, 'timeframe': timedelta(minutes=10), 'cardinality field': 'user'…
The task
For a max-cardinality session with `{'max_cardinality': 4, 'timeframe': timedelta(minutes=10), 'cardinality_field': 'user', 'timestamp_field': '@timestamp'}`, calling `add_data` with four events whose `user` values are `bill`, `coach`, `zoey`, and `louis` should leave `matches` empty. Adding another event with…
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.