Compute Aggregate Value for Each Array Element With Same Index
Compute an aggregate value for each array element with the same index using the array:reduceColumn()
Query
maxTimes := array:reduceColumn(times, var=x, function={time := max(x)})
Introduction
The array:reduceColumn()
function can be
used to compute an aggregate value for each array element with
the same index.
In this example, the
array:reduceColumn()
function is used to
find the maximum time for each array element with same index in
a flat array.
Example incoming data might look like this:
times[0] | times[1] | times[2] |
---|---|---|
1 | 2 | 3 |
5 | 1 | 0 |
Step-by-Step
Starting with the source repository events.
- flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[\Add Field/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;logscale
maxTimes := array:reduceColumn(times, var=x, function={time := max(x)})
Computes the maximum time for each array element with same index in the array and reduces it to one value.
Event Result set.
Summary and Results
The query is used to find the maximum time for each array element with same index in a flat array.
_reduceColumn[0] | _reduceColumn[1] | _reduceColumn[2] |
---|---|---|
5 | 2 | 3 |