Join Query Functions

Humio's query functions take a set of events, parameters, or configurations; and produce, reduce, or modify values within that set, or within the events themselves within the query pipeline.

Table: Join Query Functions

FunctionImplied ArgumentAvailabilityDescription
join([end], field, [include], [key], [limit], [live], [max], [mode], [query], [repo], [start], [view])query Join two Humio searches.
selfJoin([collect], field, [limit], [postfilter], [prefilter], [select], where)field Used to collate data from events that share a key.
selfJoinFilter(field, [prefilter], where)field Runs query to determine IDs, and then gets all events containing one of them.