Pandas,按组分组并查找最大值,在组中返回值和计数

8

我有一个带有日志数据的pandas DataFrame:

        host service
0   this.com    mail
1   this.com    mail
2   this.com     web
3   that.com    mail
4  other.net    mail
5  other.net     web
6  other.net     web

我希望能够在每个主机上找到最多错误的服务:

        host service  no
0   this.com    mail   2
1   that.com    mail   1
2  other.net     web   2

我找到的唯一解决方案是按照主机和服务分组,然后迭代索引的0级。

有没有人能建议更好、更短的版本?不需要迭代吗?

df = df_logfile.groupby(['host','service']).agg({'service':np.size})

df_count = pd.DataFrame()
df_count['host'] = df_logfile['host'].unique()
df_count['service']  = np.nan
df_count['no']    = np.nan

for h,data in df.groupby(level=0):
  i = data.idxmax()[0]   
  service = i[1]             
  no = data.xs(i)[0]
  df_count.loc[df_count['host'] == h, 'service'] = service
  df_count.loc[(df_count['host'] == h) & (df_count['service'] == service), 'no']   = no

完整代码 https://gist.github.com/bjelline/d8066de66e305887b714

1个回答

4

给定df,下一步是仅按host值分组并通过idxmax聚合。这将给出相应于最大服务值的索引。然后,您可以使用df.loc[...]选择与最大服务值对应的df行:

import numpy as np
import pandas as pd

df_logfile = pd.DataFrame({ 
    'host' : ['this.com', 'this.com', 'this.com', 'that.com', 'other.net', 
              'other.net', 'other.net'],
    'service' : ['mail', 'mail', 'web', 'mail', 'mail', 'web', 'web' ] })

df = df_logfile.groupby(['host','service'])['service'].agg({'no':'count'})
mask = df.groupby(level=0).agg('idxmax')
df_count = df.loc[mask['no']]
df_count = df_count.reset_index()
print("\nOutput\n{}".format(df_count))

产生DataFrame。
        host service  no
0  other.net     web   2
1   that.com    mail   1
2   this.com    mail   2

这个习语可能会成为groupby API的一个不错的补充:https://github.com/pydata/pandas/issues/8717 - Jeff

网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接