Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note

Alerts API

Note that due to technical reasons, the Alerts API is the only API that uses the LINQ syntax used in the search window of the Devo app. This is indicated in the different sections below.

...

Addition, sum, plus / Concatenation (add, +) operations

When you use this operation in the Data Search to create a new field, you can add as many arguments as needed (where applicable), however, the number of arguments is limited to two when used in APIs.

As a workaround, you can perform subsequent maximum adding operations until you have obtained the maximum of added all the arguments you need.

Search window + Alerts API

Other Devo APIs

Syntax:

Create field: select

max

add(value1, value2, value3, value4...) as

maxField

totalField

 
Query example:

Code Block
from demo.ecommerce.data
select 
max
add(bytesTransferred, timeTaken, statusCode) as 
`maxField`
`totalField`

Syntax:

Create field: select

max

add(value1, value2) as

maxFieldA

totalFieldA,

max

add(

maxFieldA

totalFieldA, value3) as

maxFieldB

totalFieldB,

max

add(

maxFieldB

totalFieldB, value4) as

maxFieldC

totalFieldC...

Query example:

Code Block
from demo.ecommerce.data
select 
max
add(bytesTransferred, timeTaken) as 
maxFieldA
totalFieldA, 
max
add(
maxFieldA
totalFieldA, statusCode) as 
maxFieldTotal
totalFieldFinal

Related articles: Maximum (max)

Minimum (min) operations → create field

When you use this operation in the Data Search to create a new field, you can add as many arguments as needed, however, the number of arguments is limited to two when used in APIs.

As a workaround, you can perform subsequent minimum operations until you have obtained the minimum of all the arguments you needAddition, sum, plus / Concatenation (add, +)

Lookup operations

Queries that use lookup operations present some particularities that make them incompatible when used from the search window to APIs or vice versa. The use of symbols is different and the domain name is required in one of them.

Search window + Alerts API

Other Devo APIs

Syntax:

Create field: select min(value1, value2, value3, value4...) as minField

 

select `lu/lookupName/lookupColumn`(field) as newColumnName

Query example:

Code Block
from demo.ecommerce.data
select `lu/IP_list/StreetAddress`(clientIpAddress) as `IP street address`

Syntax:

select lu("lookupName", "lookupColumn", field) as newColumnName

Query example:

Code Block
from demo.ecommerce.data
select 
min(bytesTransferred
lu("IP_list", 
timeTaken
"StreetAddress", 
statusCode
clientIpAddress) as
`minField`
 `IP street address`

Related article: Lookups

Lookup JSON operations

Queries that use lookup operations with JSON present some particularities that make them incompatible when used from the search window to APIs or vice versa. The use of symbols is different and a specific json command is required in one of them.

Search window + Alerts API

Other Devo APIs

Syntax:

Create field: select min(value1, value2) as minFieldA, min(minFieldA, value3) as minFieldB, min(minFieldB, value4) as minFieldC...

select `lu/lookupName`(field) as newColumnName

Query example:

Code Block
from demo.ecommerce.data
select `lu/IP_list`(clientIpAddress) as `jsonField`

Syntax:

select hlurjson("Domain_name", "lookup_name", field, eventdate) as json

Query example:

Code Block
from demo.ecommerce.data
select 
min
hlurjson(
bytesTransferred, timeTaken) as minFieldA, min(minFieldA, statusCode
"demo", "IP_list", clientIpAddress, eventdate) as 
minFieldTotal)
`json`

Related articles: Minimum (min)

...

article: Lookups

Maximum (max) operations → create field

When you use this operation in the Data Search to create a new field, you can add as many arguments as needed (where applicable), however, the number of arguments is limited to two when used in APIs.

As a workaround, you can perform subsequent adding maximum operations until you have added obtained the maximum of all the arguments you need.

Search window + Alerts API

Other Devo APIs

Syntax:

Create field: select

add

max(value1, value2, value3, value4...) as

totalField

maxField

 

Query example:

Code Block
from demo.ecommerce.data
select 
add
max(bytesTransferred, timeTaken, statusCode) as 
`totalField`
`maxField`

Syntax:

Create field: select

add

max(value1, value2) as

totalFieldA

maxFieldA,

add

max(

totalFieldA

maxFieldA, value3) as

totalFieldB

maxFieldB,

add

max(

totalFieldB

maxFieldB, value4) as

totalFieldC

maxFieldC...

Query example:

Code Block
from demo.ecommerce.data
select 
add
max(bytesTransferred, timeTaken) as 
totalFieldA
maxFieldA, 
add
max(
totalFieldA
maxFieldA, statusCode) as 
totalFieldFinal
maxFieldTotal

Related articles: Addition, sum, plus / Concatenation (add, +)

...

Maximum (max)

Minimum (min) operations → create field

When you use this operation in the Data Search to create a new field, you can add as many arguments as needed, however, the number of arguments is limited to two when used in APIs.

As a workaround, you can perform subsequent multiplication minimum operations until you have multiplied obtained the minimum of all the arguments you need.

Search window + Alerts API

Other Devo APIs

Syntax:

Create field: select

mul

min(value1, value2, value3, value4...) as

resultField

minField

 
Query example:

Code Block
from demo.ecommerce.data
select 
mul
min(bytesTransferred, timeTaken, statusCode) as 
`resultField`
`minField`

Syntax:

Create field: select

mul

min(value1, value2) as

resultFieldA

minFieldA,

mul

min(

resultFieldA

minFieldA, value3) as

resultFieldB

minFieldB,

mul

min(

resultFieldB

minFieldB, value4) as

resultFieldC

minFieldC...

Query example:

Code Block
from demo.ecommerce.data
select 
mul
min(bytesTransferred, timeTaken) as 
resultFieldA
minFieldA, 
mul
min(
resultFieldA
minFieldA, statusCode) as 
resultFieldTotal
minFieldTotal)

Related articles: Multiplication, product (mul, *)

Lookup operations

Queries that use lookup operations present some particularities that make them incompatible when used from the search window to APIs or vice versa. The use of symbols is different and the domain name is required in one of them.

...

Search window + Alerts API

...

Other Devo APIs

Syntax:

select `lu/lookupName/lookupColumn`(field) as newColumnName

...

Code Block
from demo.ecommerce.data
select `lu/IP_list/StreetAddress`(clientIpAddress) as `IP street address`

...

Syntax:

select lu("lookupName", "lookupColumn", field) as newColumnName

Query example:

Code Block
from demo.ecommerce.data
select lu("IP_list", "StreetAddress", clientIpAddress) as `IP street address`

Related article: Data enrichment

Lookup JSON operations

Queries that use lookup operations with JSON present some particularities that make them incompatible when used from the search window to APIs or vice versa. The use of symbols is different and a specific json command is required in one of them.

...

Search window + Alerts API

...

Other Devo APIs

...

Syntax:

select `lu/lookupName`(field) as newColumnName

Query example:

Code Block
from demo.ecommerce.data
select `lu/IP_list`(clientIpAddress) as `jsonField`

...

Syntax:

select hlurjson("Domain_name", "lookup_name", field, eventdate) as json

Query example:

Code Block
from demo.ecommerce.data
select hlurjson("demo", "IP_list", clientIpAddress, eventdate) as `json`

Related article: Data enrichment

Minimum (min)

Mlevalmodel operation

mlevalmodel operation is not supported in search window. Use this operation in APIs when you want to work with models you uploaded in Model Management.

...

Refer article: Model Management

Multiplication, product (mul, *) operations

When you use this operation in the Data Search, you can add as many arguments as needed, however, the number of arguments is limited to two when used in APIs.

As a workaround, you can perform subsequent multiplication operations until you have multiplied all the arguments you need.

Search window + Alerts API

Other Devo APIs

Syntax:

Create field: select mul(value1, value2, value3, value4...) as resultField


Query example:

Code Block
from demo.ecommerce.data
select mul(bytesTransferred, timeTaken, statusCode) as `resultField`

Syntax:

Create field: select mul(value1, value2) as resultFieldA, mul(resultFieldA, value3) as resultFieldB, mul(resultFieldB, value4) as resultFieldC...

Query example:

Code Block
from demo.ecommerce.data
select mul(bytesTransferred, timeTaken) as resultFieldA, mul(resultFieldA, statusCode) as resultFieldTotal

Related articles: Multiplication, product (mul, *)