...
This operator requires the lhub_ts
column. It first orders rows by the lhub_ts
column and then computes the difference between consecutive rows.
Operator Usage in Easy Mode
- Click + on the parent node.
- Enter the Find Difference operator in the search field and select the operator from the Results to open the operator form.
- In the Select Baseline drop-down, enter or select the baseline to pull data from.
- Optional fields
Start Time: Enter an offset time or a specific start time to pull the data from. Offset time
allows you to set time in seconds, minutes, hours, days, or weeks; Specific time allows you to
select the date and time.
End Time: Enter an offset time or a specific end time to pull the data from. Offset time allows
you to set time in seconds, minutes, hours, days, or weeks; Specific time allows you to select
the date and time. - Click Run to view the result.
- Click Save to add the operator to the playbook.
- Click Cancel to discard the operator form.
Usage Details
LQL Command
Code Block |
---|
findDiff(table, column) |
...
Output
The input table with an additional column with the _diff suffix.
Example
Input
lhub_ts | bytes_out |
---|---|
1 | 30 |
3 | 10 |
2 | 20 |
...