PRODUCT
LEARN
CAREERS
ABOUT US

Skip to content

Observability Cloud documentation

Welcome to Observe

Welcome to Observe
Get help with Observe
Observe tutorials
What’s new

Add Data

Observe Agent
Cloud integrations
Observe integrations
Custom data ingestion
APM instrumentation
LLM instrumentation

OPAL Reference

What is OPAL?
- OPAL language syntax
- OPAL data types and operators
- OPAL examples
- OPAL case sensitivity
- Parsing time strings in OPAL
- All OPAL functions
- OPAL Functions By Category
  - OPAL Aggregate Functions
    - any
    - any_not_null
    - array_agg
    - array_agg_distinct
    - array_union_agg
    - avg
    - count
    - count_distinct
    - count_distinct_exact
    - delta
    - delta_monotonic
    - deriv
    - first
    - first_not_null
    - hash_agg
    - hash_agg_distinct
    - histogram_combine
    - last
    - last_not_null
    - max
    - median
    - median_exact
    - min
    - object_agg
    - otel_exponential_histogram_sum
    - otel_histogram_sum
    - percentile
    - percentile_cont
    - percentile_disc
    - prom_quantile
    - rate
    - stddev
    - string_agg
    - string_agg_distinct
    - sum
    - tdigest_agg
    - tdigest_combine
    - topk_agg
  - OPAL Boolean Functions
    - array_contains
    - arrays_overlap
    - bool
    - bool_null
    - contains
    - ends_with
    - eq
    - gt
    - gte
    - in
    - ipv4_address_in_network
    - is_null
    - like
    - lt
    - lte
    - match_regex
    - ne
    - path_exists
    - same
    - search
    - starts_with
  - OPAL Misc Functions
    - asc
    - coalesce
    - desc
    - exponential_histogram_null
    - float64
    - frame
    - frame_exact
    - frame_following
    - frame_preceding
    - hash
    - histogram_null
    - histogram_quantile
    - if
    - if_null
    - int64
    - m_exponential_histogram
    - m_histogram
    - m_tdigest
    - nullsfirst
    - nullslast
    - numeric_null
    - on
    - order_by
    - parse_hex
    - strlen
    - tdigest
    - tdigest_null
    - variant_null
  - OPAL Networking Functions
  - OPAL Numeric Functions
    - abs
    - arccos_deg
    - arccos_rad
    - arcsin_deg
    - arcsin_rad
    - arctan_deg
    - arctan_rad
    - avg
    - ceil
    - cos_deg
    - cos_rad
    - count
    - degrees
    - delta
    - delta_monotonic
    - dense_rank
    - deriv
    - ewma
    - exp
    - float64_null
    - floor
    - haversine_distance_km
    - int64_null
    - int_div
    - ln
    - log
    - median
    - median_exact
    - mod
    - percentile
    - percentile_cont
    - percentile_disc
    - pi
    - pow
    - prom_quantile
    - radians
    - rank
    - rate
    - round
    - row_number
    - sin_deg
    - sin_rad
    - sqrt
    - stddev
    - sum
    - tan_deg
    - tan_rad
    - uniform
    - width_bucket
    - zipf
  - OPAL Regex Functions
  - OPAL Semistructured Functions
  - OPAL Special Functions
    - case
    - group_by
    - m
    - metric
    - options
    - primary_key
    - pk
    - tags
    - valid_for
    - window
  - OPAL String Functions
    - array_to_string
    - check_json
    - concat_strings
    - contains
    - decode_base64
    - decode_uri
    - decode_uri_component
    - detect_browser
    - editdistance
    - embed_sql_params
    - encode_base64
    - encode_uri
    - encode_uri_component
    - ends_with
    - format_time
    - get_regex
    - int64_to_ipv4
    - ipv4_address_in_network
    - label
    - left
    - like
    - lower
    - lpad
    - ltrim
    - parse_csv
    - parse_kvs
    - parse_timestamp
    - pivot_array
    - position
    - regex
    - replace
    - replace_regex
    - right
    - rpad
    - rtrim
    - sha2
    - split
    - split_part
    - starts_with
    - string
    - string_agg
    - string_agg_distinct
    - string_null
    - substring
    - tokenize
    - tokenize_part
    - trim
    - unpivot_array
    - upper
    - variant_type_name
  - OPAL Time Functions
    - abs
    - avg
    - bin_end_time
    - bin_size
    - bin_start_time
    - delta
    - delta_monotonic
    - deriv
    - duration
    - duration_hr
    - duration_min
    - duration_ms
    - duration_null
    - duration_sec
    - ewma
    - format_time
    - from_milliseconds
    - timestamp_ms
    - from_nanoseconds
    - timestamp_ns
    - from_seconds
    - timestamp_s
    - histogram_fraction
    - median
    - median_exact
    - now
    - parse_duration
    - parse_isotime
    - parse_timestamp
    - percentile
    - percentile_cont
    - percentile_disc
    - query_end_time
    - query_start_time
    - rate
    - row_end_time
    - row_timestamp
    - row_start_time
    - stddev
    - sum
    - tdigest_agg
    - tdigest_quantile
    - timestamp_null
    - to_days
    - to_hours
    - to_milliseconds
    - to_minutes
    - to_nanoseconds
    - to_seconds
    - to_weeks
    - valid_for
  - OPAL Window Functions
    - any
    - any_not_null
    - array_union_agg
    - avg
    - count
    - count_distinct
    - count_distinct_exact
    - delta
    - delta_monotonic
    - dense_rank
    - deriv
    - ewma
    - first
    - first_not_null
    - hash_agg
    - hash_agg_distinct
    - lag
    - lag_not_null
    - last
    - last_not_null
    - lead
    - lead_not_null
    - max
    - median
    - median_exact
    - min
    - object_agg
    - percentile
    - percentile_cont
    - percentile_disc
    - rank
    - rate
    - row_number
    - stddev
    - sum
    - tdigest_agg
    - tdigest_combine
    - topk_agg
  - OPAL Deprecated Function Aliases
    - any_null
    - array_pivot
    - array_unpivot
    - countdistinct
    - countdistinctexact
    - decodebase64
    - denserank
    - encodebase64
    - endswith
    - groupby
    - ifnull
    - isnull
    - makeobject
    - match_regex_all
    - medianexact
    - milliseconds
    - nanoseconds
    - orderby
    - parsehex
    - parseip
    - parseisotime
    - parsejson
    - parsekvs
    - parseurl
    - percentilecont
    - percentiledisc
    - primarykey
    - queryendtime
    - querystarttime
    - regex_match
    - regex_replace
    - row_endtime
    - rownumber
    - seconds
    - startswith
    - strcat
    - string_concat
    - validfor
- All OPAL verbs
- OPAL Verbs By Category
  - OPAL Aggregate Verbs
    - aggregate
    - align
    - dedup
    - distinct
    - fill
    - histogram
    - make_reference
    - make_session
    - merge_events
    - pivot
    - rollup
    - statsby
    - timechart
    - bucketize
    - timestats
    - unpivot
  - OPAL Filter Verbs
    - always
    - bottomk
    - ever
    - filter
    - filter_last
    - limit
    - never
    - topk
  - OPAL Join Verbs
    - exists
    - follow
    - follow_not
    - fulljoin
    - join
    - leftjoin
    - lookup
    - lookup_ip_info
    - not_exists
    - surrounding
    - union
    - update_resource
  - OPAL Metadata Verbs
  - OPAL Metrics Verbs
    - aggregate
    - align
    - make_metric
    - rollup
    - set_metric
    - timeshift
  - OPAL Projection Verbs
  - OPAL Semistructured Verbs
  - OPAL Deprecated Verb Aliases
    - addfk
    - addkey
    - addmetric
    - changelog
    - coldrop
    - colenum
    - colimmutable
    - colmake
    - colpick
    - colregex
    - colrename
    - colshow
    - droptime
    - fkdrop
    - flattenall
    - flattenleaves
    - flattensingle
    - makeresource
    - makesession
    - merge_event
    - mergeevent
    - reaggregate
    - setlabel
    - setpk
    - setvf
    - setvt
OPAL tutorials
- OPAL 101 – Get started with OPAL
- OPAL 102 – Shape structured and unstructured data using stages
OPAL performance cookbook
OPAL helpful hints

Products

Observe AI
Log management
APM observability
LLM observability
- LLM telemetry reference
Metrics
Kubernetes observability
Snowflake observability

Platform Capabilities

Create dashboards
Create Monitors and alerts
Create and share worksheets
- Work with data formats and types
Pivot between data types
Correlation tags
Resources
Data export
Conditional formatting

Manage Observe

Settings
Authentication and authorization
Customize the Home page
- Create and use favorites

Develop with Observe

Export query results
Developer toolkit overview
URL query parameters
CLI tool overview
Snowflake outbound sharing
Observe Terraform provider

Knowledge Base

Key Observe concepts
Observasaurus
Visualization types
Observe deployment regions
Keyboard shortcuts
Units of measurement

Install on Ansible¶

Install the Observe Agent on Ansible for Linux and Windows:

Install on Ansible for Linux
Install on Ansible for Windows

Install using Ansible on Linux

Install on Amazon ECS (Fargate)

Copyright © 2017-2025 Observe, Inc.

Made with Furo

Have comments about the Observe docs?