Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel1
maxLevel2
typeflat

About lookup correlation

You can run a search and correlate its content with values from a lookup table. If any value in the key field of the lookup table is also present in your query, the corresponding values of the selected lookup field will be added to a new field.

You also have the option to consolidate all the values from a lookup row into a single field. This can be helpful for checking the values contained in the lookup (including the values of the key field) or when using a lookup that contains only the key field (to seek correlation without enrichment).

What permissions do I need?

To be able to view and use lookup operations when working in the search window, you need to have at least the View version of the Lookups permissions for upload lookups or the Query lookups permission for query lookups. Having the User resources permission is equivalent to having the Manage version of these two permissions.

...

Additionally, if you’re not the owner of the lookup, you need to receive at least View access to the lookup in question via sharing, otherwise, you will not be able to see it. Check Share lookups to know more.

...

Using lookup operations in the search window

You can use the search window interface to perform the value correlation and the creation of new fields to enrich the data table.

  1. Go to Data search and open a data table.

  2. Click Create field in the query toolbar and give it a meaningful name.

  3. Select Lookups in the operation category

  4. Choose the desired operation based on the type of lookups and the enrichment you need:

  5. Add the required arguments for the selected operation.

    • Lookup name: choose the lookup you want to use to enrich your table by using the dropdown, which shows all the lookups you have access to.

    • Lookup field: choose the lookup field you want to use to enrich your table by using the dropdown, which shows all the fields within the selected lookup except the key field.

    • Key: choose the table field you want to use to find matches with the lookup key field (their data types must match to enable the field creation and the enrichment will be successful only when their values match). You can use the dropdown, which shows all the fields within your table, but you can also manually write the field name using the pencil icon.

    • Time (optional - only for lookups that keep history): choose the table timestamp you want to use to correlate with the lookup timestamp (the data type must be a timestamp to enable the field creation). You can use the dropdown, which shows all the fields within your table, but you can also manually write the field name using the pencil icon.

  6. Click Create field and the table will be enriched with a new field containing lookup values wherever successful matches are found and null values when they are not.

...

Using lookup operations in LINQ

You can also correlate lookup values and create new fields by using the corresponding LINQ syntax. To do this, you can either use the Free Text Query to open the search or open the Query code editor if you have it already open.

Available operations

Syntax overview

Use the operator select... as...  and add the operation syntax. The syntax and arguments depend on the operation:

...