Retrieves a list of available fields.
Note
This function takes no parameters.
Click + next to an example below to get the full details.
Request a list of all fields in a repository using the fieldset() function
In this example, the fieldset() function is used to
request a list of all fields in a repository for HTTP access logs.
Starting with the source repository events.
Returns a list of all available fields in a repository for HTTP access
logs.
Event Result set.
The query is used to return a list of all fields within the current
event set. The fieldset() function is particularly
useful when you are new to an event set, as it provides a quick way to
get an overview of all available fields without having to inspect
individual events manually. Also a valuable tool for further querying
when combining it with other functions or filters to explore specific
subsets of the data.
Sample output from the incoming example data (HTTP access log):
The list of returned fields is context specific. The field list can be
reduced as part of the query when combined with other functions, for
example, by an aggregate function:
groupBy([#type,@host])
| fieldset()
Sample output from the incoming example data when reduced:
