shannonEntropy( ) Query Function

Calculates a entropy measure from a string of characters.


Name Type Required Default Description
field string Yes The name of the input field.
as string No _shannonentropy The output name of the field to set

field is the unnamed parameter.


Shows how to calculate a shannon entropy value for the string in a field. An input event with the field “dns_name” with the value “” results in the field “entropy” having the rounded value 3.095795.

entropy := shannonEntropy(dns_name)