GetRegexCacheStats returns the current number of cached patterns.

GetSamples returns all collected samples from Redis

GetStats returns sampling statistics from Redis

LocalCacheFRQSum performs frequency sum aggregation using local cache. groupByKey: Cache key for grouping sumData: Value to add to the sum rangeInt: T

NewInput creates an Input from config and downstreams.

RedisFRQSum performs frequency sum aggregation using Redis groupByKey: Redis key for grouping sumData: Value to add to the sum rangeInt: Time range in

RedisHGetAll returns all field-value pairs of a hash

RedisLRange returns list range

Release releases the distributed lock

SetRawConfig stores raw configuration by type and ID

StageCount returns the number of stages in the condition.

Stop stops the project and all its components in proper order

Stop stops the input component and its consumers

UntrackAbsenceKey removes a key from absence scanning.

WriteComponentFile writes content to a component file It also updates the in-memory cache for temporary files Parameters: - path: full file path to wr

attachLlmError annotates the message with an llm error block for this agent. The message is still forwarded to downstream components so the pipeline c

cleanup performs cleanup when normal stop fails or panic occurs

cleanupStateValueRefs deletes external snapshot references associated with a sequence state.

clearAllLocalComponents clears all local components and projects when leader session changes This function never fails - it will try best effort to cl

detectOrDefaultElasticsearchVersion returns: - normalized explicit version if provided - otherwise, tries to detect from cluster root - on detection f

doClickHouseQuery executes a simple query against a ClickHouse host and returns the response body

ensureLogDir creates the log directory if it doesn't exist

executeIteratorThreshold executes a threshold check within an iterator context

flush batch writes to ES

flush batch writes to ClickHouse

getCacheKey generates a cache key for the given query

getCacheKey generates a cache key for the given hash

getCacheKey generates a cache key for the given IP

getCompiledRegex retrieves a compiled regex from cache or compiles and caches it.

getErrorLogsFromKey retrieves error logs from a specific Redis key

getRulesetFolderFromPath extracts the folder name from a ruleset's full file path. Returns "" if the ruleset is in the root directory.

hasEventGroupBy checks if any event in the sequence has a per-event group_by.

loadEventsFromTestdataJSON loads testdata/events/*.json with top-level "events" array.

logWithCaller adds caller information to log entries

============================================================ cep_state.go — SetState, String, removeFromWheelSlot ====================================

parsePluginParameters extracts parameter information from the plugin function

ARM64-optimized SIMDContains using NEON concepts

processBatch processes a batch of samples efficiently using Redis pipeline

Helper function to return appropriate error format based on call mode

reloadComponentUnified provides unified component reload logic for all sources

truncateForLog limits long argument / result payloads so logs remain readable.

updateComponentInstance updates existing component instances with new configuration

AnyToString converts various types to their string representation. Supports string, int, bool, float64, int64, and falls back to JSON for others.

CachedRegexMatchWithPrecompiled performs regex matching using pre-compiled regex This is for static regex patterns that are already compiled NOTE: Cac

CheckConnectivity performs a real connectivity test for the output component This method tests actual connection to external systems (Kafka, ES, etc.)

CompactAgentLogTraceJSON rewrites a trace JSON array: each llm step's input_messages becomes TraceInputMessagesPlaceholder. Tool rows and LLM outputs

Agent accessors

GetCheckData traverses a nested map[string]interface{} using a key path (checkKeyList). Returns the string value and whether it exists. Handles map, s

GetNodeID returns the current node ID

GetPluginLogger returns the plugin logger instance

GetRegexResultCacheStats returns cache statistics for monitoring

GetSuccessIncrementAndUpdate returns the increment in success count since last call and updates the baseline This method is thread-safe and designed f

LockKey acquires a per-key mutex, ensuring exclusive access to a SequenceState. Must be paired with UnlockKey. Used to protect the entire read-modify-

NewFromExisting creates a new Ruleset instance from an existing one with a different ProjectNodeSequence This is used when multiple projects use the s

ParseCheckNodePluginCall parses a plugin call for check nodes, supporting negation with ! prefix

ProcessMessageWithTrace runs one message through the agent and returns the result plus a full trace: every LLM call (input_messages + model output) an

RedisHGet gets a field from a Redis hash

===================== Hash and Pub/Sub Helpers ===================== RedisHSet sets a field in a Redis hash (no expiration)

RemoveChange removes a pending change

ResetConsumeTotal resets the total consumed count to zero. This should only be called during component cleanup or forced restart.

Helper function to safely access input downstream