Join Query Functions
Humio's query functions take a set of events, parameters, or configurations; and produce, reduce, or modify values within that set, or within the events themselves within the query pipeline.
Table: Join Query Functions
| Function | Implied Argument | Availability | Description |
|---|---|---|---|
join([end], field, [include], [key], [limit], [live], [max], [mode], [query], [repo], [start], [view]) | query | Join two Humio searches. | |
selfJoin([collect], field, [limit], [postfilter], [prefilter], [select], where) | field | Used to collate data from events that share a key. | |
selfJoinFilter(field, [prefilter], where) | field | Runs query to determine IDs, and then gets all events containing one of them. |