Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Rw ui steps macro
Rw step

Go to Data Searchsearch and open a data table (in this case demo.ecommerce.data).

Rw step

Click Create field in the query toolbar and give it a meaningful name. You will create two new fields: IP_Street_Address and IP_Brand.

Rw step

Select the operation of the field you want to add based on the IP_List lookup (in these cases StreetAddress and Brand).

Image RemovedImage Added

Image RemovedImage Added

Rw step

Status
colourBlue
titleLookups:
Add the clientIpAddress argument when creating the IP_Street_Address field.

Status
colourBlue
titleTime range Lookups:
Add a second argument with timestamp values (not in this example).

Image RemovedImage Added
Rw step

Click Create field and the new two fields will be added at the end of the table.

...

Rw ui tabs macro
Rw tab
titleIn the search window

The process is essentially the same as the standard one explained above except for the operation selected, which must be Whole entry of…

Image RemovedImage Added
Rw tab
titleUsing LINQ

You can also add lookup rows as JSON objects by using the corresponding LINQ syntax in the query.

To do it, you can either use the Free Text Query to open the search from the beginning or open the Query code editor if you have it already open. This is the syntax you need to use:

select `lu/lookupName`(tableField) as newfieldName

Info

Syntax special considerations

  • tableField → this must be the field in your data table that corresponds to the lookup key field, otherwise there will be no match to correlate your data and you will get null for all events.

You can then split the resulting JSON objects into their different key/value pairs and transform them into different data types using the operations in the JSON group.