Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
maxLevel2
typeflat

About lookup tables

Lookup tables are used to enrich the information in raw data tables by correlating values in the data table with corresponding values in the lookup table. For example, a lookup table containing IP addresses with their geographical addresses may be used to add geographical addresses to a data table containing IP addresses during a query. 

  • Lookup values are added to the virtual data table at query time, as new fields. The original data tables are never modified. 

  • A key value must be selected. This is the field in the lookup table that has values that correspond to values in the data table. In our example, the key field will be the field containing the IP addresses, which exists both in the lookup table and original data table.

  • Lookup tables can be edited to add, change or delete information.

Use cases

Here are some common use cases that demonstrate how lookup tables can be used.

Converting codes into names

  • Convert an IP address into a machine name.

  • Convert an IP address into a geo-localization.

Add values to classify or filter events

  • Associate an IP to known threats.

  • Group IP by types of devices: servers, portable computers, printers.

...

  • They can associate robot IDs to factory locations.

  • They can categorize types of robots but their functions.

  • They can assign rankings to robots based on measurements in the data table.

Types of lookup tables

In Devo, lookup tables are grouped into four different categories and can be created by uploading a .csv file or using query data.

...