lookup() Query Function

Enhances events with metadata. Data can be managed in the Files tab in the UI or be uploaded as CSV or JSON files using the files endpoint.

Parameters

Name

Type

Required

Default

Description

from

string

Yes

Specifies the source file.

include

[string]

No

Specifies fields to include, defaults to all.

on

[string]

Yes

Specifies which field(s) to join on; if passed as array the first is the field from the file, the second is from the event.

The implied parameter is from.

Examples

Lookup rows from table users.csv where the userid column equals the id field of this event

humio
lookup("users.csv", on=[userid,id])