Deprecated: 1.30

This function is deprecated. Refer to match() function instead.

Enhances events with metadata. Data can be managed in the Files tab in the UI or be uploaded as CSV or JSON files using the files endpoint.

Function Traits: Transformation

ParameterTypeRequiredDefaultDescription
from[a]stringrequired  Specifies the source file.
includeArray of stringsoptionalall Specifies fields to include, defaults to all.
onArray of stringsrequired  Specifies which field(s) to join on; if passed as array the first is the field from the file, the second is from the event.

[a] The argument name from can be omitted.

The parameter name for from can be omitted; the following forms are equivalent:

logscale
lookup("value")

and:

logscale
lookup(from="value")

lookup() Examples

Lookup rows from table users.csv where the userid column equals the id field of this event

logscale
lookup("users.csv", on=[userid,id])