Issue with avg function returning floor values in YARA-L

[prashant_nakum]

Hi everyone,

I am working on SecOps Native Dashboards and encountered an issue while using the avg function in YARA-L.

Below is my query:

metadata.vendor_name="ABC"
$uid=about.labels["uid"]
match:
	$uid
outcome:
	$duration=avg(duration.seconds)

The result values are automatically rounded down to the floor value, but I want the values to retain floating-point precision.

I tried using the window.avg function and also applied the round function, as shown below:

metadata.vendor_name="ABC"
$uid=about.labels["uid"]
match:
	$uid
outcome:
	$duration=math.round(avg(duration.seconds), 3)

However, the results still return the floor value.

Why is this happening? Is there any alternative or solution to achieve the desired results?

Thanks,
Prashant Nakum