• our product
  • about us
  • blog
  • resources
  • careers
Contents Menu Expand Light mode Dark mode Auto light/dark mode
documentation
Light Logo Dark Logo

Getting started

  • Overview
  • Ingesting and Exploring Data with Observe
  • Introduction to Alerts and Monitors
    • Alerting example: Channels, Channel Actions, and Monitors
    • Monitor Notification Options
    • Customizing alert messages
    • Channel Action Integrations
      • PagerDuty
  • Introduction to Metrics
  • Data ingestion
    • Sources
      • Amazon API Gateway logs
      • Amazon S3
      • AWS AppSync
      • AWS CloudTrail
      • Amazon EventBridge
      • Amazon GuardDuty
      • CloudWatch metrics streams
      • AWS CloudWatch Logs
      • GitHub
      • Google Workspace Audit Logs
      • Jenkins Build Logs
      • Jira Tickets
      • Windows Servers
      • Zendesk Tickets
    • Forwarders
      • Amazon Kinesis Firehose
      • Elastic Beats
      • Fluent Bit
      • Fluentd
      • Google Cloud Pub/Sub
      • Log4j
      • Logstash
      • Observe Lambda
      • OpenTelemetry
      • Prometheus
      • Telegraf
    • Data streams
    • Endpoints
      • HTTP
      • DDTrace
      • Elastic
      • Kinesis
      • LogPlex
      • OpenTelemetry
      • Prometheus
      • Zipkin

Working with data

  • Observe Integrations
    • AWS Integration
      • Amazon CloudFront
      • Amazon EC2
      • Amazon RDS
        • Amazon RDS metrics
      • AWS Lambda
        • AWS Lambda metrics
      • Elastic Load Balancing
        • Elastic Load Balancing metrics
    • Kubernetes Integration
    • Linux Host Monitoring Integration
  • Worksheets
  • Tutorial: modeling weather data

Managing your Workspace

  • Workspace Settings

OPAL query Language

  • OPAL — Observe Processing and Analysis Language
    • Data types and operators
    • Language syntax
    • Performance
    • Examples
  • All OPAL verbs
    • OPAL Verbs By Category
      • OPAL Aggregate Verbs
        • aggregate
        • align
        • dedup
        • distinct
        • make_col
        • make_session
        • merge_events
        • rollup
        • statsby
        • timechart
        • bucketize
        • timestats
      • OPAL Filter Verbs
        • always
        • ever
        • filter
        • never
        • topk
      • OPAL Join Verbs
        • exists
        • flatten
        • flatten_all
        • flatten_leaves
        • flatten_single
        • follow
        • fulljoin
        • join
        • leftjoin
        • lookaround_join
        • lookup
        • surrounding
        • union
        • update_resource
      • OPAL Metadata Verbs
        • add_key
        • colenum
        • colimmutable
        • colshow
        • droptime
        • interface
        • make_event
        • make_resource
        • make_session
        • merge_events
        • set_label
        • set_link
        • set_metric
        • set_primary_key
        • set_pk
        • set_valid_from
        • set_valid_to
        • unset_keys
        • unset_link
      • OPAL Metrics Verbs
        • aggregate
        • align
        • rollup
        • set_metric
      • OPAL Misc Verbs
        • flatten
        • flatten_all
        • flatten_leaves
        • flatten_single
      • OPAL Projection Verbs
        • drop_col
        • extract_regex
        • make_col
        • pick_col
        • rename_col
      • OPAL Deprecated Verb Aliases
        • addfk
        • addkey
        • addmetric
        • changelog
        • coldrop
        • colmake
        • colpick
        • colregex
        • colrename
        • fkdrop
        • flattenall
        • flattenleaves
        • flattensingle
        • makeresource
        • makesession
        • merge_event
        • mergeevent
        • reaggregate
        • setlabel
        • setpk
        • setvf
        • setvt
  • All OPAL functions
    • OPAL Functions By Category
      • OPAL Aggregate Functions
        • any
        • any_not_null
        • array_agg
        • avg
        • count
        • count_distinct
        • count_distinct_exact
        • deriv
        • first
        • first_not_null
        • last
        • last_not_null
        • max
        • median
        • median_exact
        • min
        • object_agg
        • percentile
        • percentile_cont
        • percentile_disc
        • rate
        • stddev
        • string_agg
        • sum
      • OPAL Boolean Functions
        • bool
        • bool_null
        • contains
        • ends_with
        • eq
        • gt
        • gte
        • is_null
        • like
        • lt
        • lte
        • match_regex
        • ne
        • path_exists
        • search
        • starts_with
      • OPAL Misc Functions
        • any_null
        • coalesce
        • frame
        • frame_exact
        • if
        • if_null
        • in
        • order_by
        • parse_json
        • position
        • string
        • string_null
      • OPAL Numeric Functions
        • abs
        • array_length
        • avg
        • ceil
        • count
        • count_distinct
        • count_distinct_exact
        • dense_rank
        • deriv
        • exp
        • float64
        • float64_null
        • floor
        • hash
        • haversine_distance_km
        • int64
        • int64_null
        • ln
        • log
        • median
        • mod
        • numeric_null
        • parse_hex
        • percentile
        • percentile_cont
        • percentile_disc
        • pow
        • rank
        • rate
        • round
        • row_number
        • sqrt
        • stddev
        • strlen
      • OPAL Regex Functions
        • match_regex
        • match_regex_all
        • replace_regex
      • OPAL Semistructured Functions
        • array
        • array_agg
        • array_length
        • array_null
        • drop_fields
        • get_field
        • get_item
        • make_array
        • make_fields
        • make_object
        • match_regex
        • match_regex_all
        • object
        • object_agg
        • object_keys
        • object_null
        • parse_csv
        • parse_ip
        • parse_kvs
        • parse_url
        • path_exists
        • pick_fields
        • pivot_array
        • slice_array
        • split
        • tokenize
        • unpivot_array
      • OPAL Special Functions
        • case
        • group_by
        • m
        • metric
        • options
        • primary_key
        • pk
        • valid_for
        • window
      • OPAL String Functions
        • decode_base64
        • decode_uri
        • decode_uri_component
        • encode_base64
        • encode_uri
        • encode_uri_component
        • format_time
        • left
        • lower
        • lpad
        • ltrim
        • replace
        • replace_regex
        • right
        • rpad
        • rtrim
        • split_part
        • strcat
        • string_agg
        • substring
        • tokenize_part
        • trim
        • upper
      • OPAL Time Functions
        • bin_end_time
        • bin_start_time
        • duration
        • duration_hr
        • duration_min
        • duration_ms
        • duration_null
        • duration_sec
        • format_time
        • from_milliseconds
        • timestamp_ms
        • from_nanoseconds
        • timestamp_ns
        • from_seconds
        • timestamp_s
        • parse_isotime
        • query_end_time
        • query_start_time
        • row_end_time
        • row_timestamp
        • timestamp_null
        • valid_for
      • OPAL Window Functions
        • any
        • any_not_null
        • avg
        • count
        • count_distinct
        • count_distinct_exact
        • dense_rank
        • deriv
        • first
        • first_not_null
        • lag
        • last
        • last_not_null
        • lead
        • max
        • median
        • median_exact
        • min
        • object_agg
        • percentile
        • percentile_cont
        • percentile_disc
        • rank
        • rate
        • row_number
        • stddev
        • sum
      • OPAL Deprecated Function Aliases
        • array_pivot
        • array_unpivot
        • countdistinct
        • countdistinctexact
        • decodebase64
        • denserank
        • encodebase64
        • endswith
        • groupby
        • ifnull
        • isnull
        • makeobject
        • medianexact
        • milliseconds
        • nanoseconds
        • orderby
        • parsehex
        • parseip
        • parseisotime
        • parsejson
        • parsekvs
        • parseurl
        • percentilecont
        • percentiledisc
        • primarykey
        • queryendtime
        • querystarttime
        • regex_match
        • regex_replace
        • row_endtime
        • rownumber
        • seconds
        • startswith
        • validfor

Reference

  • Observe Glossary
  • Helpful Hints
  • Observe Datasets and Time
    • Foreign Keys
    • Resource Primary Keys
    • Resource Times
  • Observe Basic Data Processing Model
  • Observe release notes and updates
  • FAQ

OPAL Functions By Category¶

  • Aggregate functions

  • Boolean functions

  • Misc functions

  • Numeric functions

  • Regex functions

  • Semistructured functions

  • Special functions

  • String functions

  • Time functions

  • Window functions

All OPAL Functions

Next
OPAL Aggregate Functions
Previous
All OPAL functions
Copyright © 2022 Observe, Inc.

Have comments about the Observe docs?