Compute Aggregate Value for Each Array Element With Same Index
Compute an aggregate value for each array element with the same index using the array:reduceColumn()
Query
maxTimes := array:reduceColumn(times, var=x, function={time := max(x)})
Introduction
The array:reduceColumn()
function can be used to
compute an aggregate value for each array element with the same index.
In this example, the array:reduceColumn()
function
is used to find the maximum time for each array element with same index
in a flat array.
Example incoming data might look like this:
times[0] | times[1] | times[2] |
---|---|---|
1 | 2 | 3 |
5 | 1 | 0 |
Step-by-Step
Starting with the source repository events.
- flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[\Add Field/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;logscale
maxTimes := array:reduceColumn(times, var=x, function={time := max(x)})
Computes the maximum time for each array element with same index in the array and reduces it to one value.
Event Result set.
Summary and Results
The query is used to find the maximum time for each array element with same index in a flat array.
_reduceColumn[0] | _reduceColumn[1] | _reduceColumn[2] |
---|---|---|
5 | 2 | 3 |