collect() Query Function

Collects fields from multiple events into one event.

Parameters

Name

Type

Required

Default

Description

multival

boolean

No

true

Collects the resulting value as multivalue (a single field value using separator).

fields

[string]

Yes

Names of the fields to keep.

limit

number

No

2000

Limit to number of distinct values in collect.

separator

string

No

Separator used for multiple values.

The implied parameter is fields.

Examples

Collects visitors, each visitor defined as non-active after one minute.

humio
groupby(client_ip, function=session(maxpause=1m, collect([url])))