Compare More Fields and Their Respective Values

Compare more fields and their respective values

Query

logscale
test(field1 < field2)

Introduction

The test() function can be used to make comparisons between one field and one value, and it can also compare more fields and their respective values.

In this example, the test() function is used to check if the value of field1 is less than the value in field2.

Step-by-Step

  1. Starting with the source repository events.

  2. flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[(Filter Function)] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ffbf00; style 0 fill:#ff0000,stroke-width:4px,stroke:#000;
    logscale
    test(field1 < field2)

    Evaluates if the value of the field field1 is less than the value in field field2.

  3. Event Result set.

Summary and Results

The query is used to compare more fields and their respective values.