Collects fields from multiple events into one event.
Parameter | Type | Required | Default | Description |
---|---|---|---|---|
fields | [string] | true | Names of the fields to keep. [a] | |
limit | number | false | 2000 | Limit to number of distinct values in collect. |
multival | boolean | false | true | Collects the resulting value as multivalue (a single field value using separator). |
separator | string | false | \n | Separator used for multiple values. |
Examples
Collects visitors, each visitor defined as non-active after one minute.
logscale
groupby(client_ip, function=session(maxpause=1m, collect([url])))