Compare More Fields and Their Respective Values
Compare more fields and their respective values
Query
logscale
test(field1 < field2)
Introduction
The test()
function can be used to make
comparisons between one field and one value, and it can also
compare more fields and their respective values.
In this example,
the test()
function is used to check if the
value of field1 is less
than the value in field2.
Step-by-Step
Starting with the source repository events.
- flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[(Filter Function)] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ffbf00; style 0 fill:#ff0000,stroke-width:4px,stroke:#000;logscale
test(field1 < field2)
Evaluates if the value of the field field1 is less than the value in field field2.
Event Result set.
Summary and Results
The query is used to compare more fields and their respective values.