our product
about us
blog
resources
careers

Hide navigation sidebar

Hide table of contents sidebar

Toggle site navigation sidebar

documentation

Toggle table of contents sidebar

Getting started

Overview
Ingesting and Exploring Data with Observe
Introduction to Alerts and Monitors
Toggle child pages in navigation
- Alerting example: Channels, Channel Actions, and Monitors
- Monitor Notification Options
- Customizing alert messages
- Channel Action Integrations
  Toggle child pages in navigation
  - PagerDuty
Introduction to Metrics
Data ingestion
Toggle child pages in navigation
- Sources
  Toggle child pages in navigation
- Forwarders
  Toggle child pages in navigation
- Data streams
- Endpoints
  Toggle child pages in navigation
  - HTTP
  - DDTrace
  - Elastic
  - Kinesis
  - LogPlex
  - OpenTelemetry
  - Prometheus
  - Zipkin

Working with data

Observe Integrations
Toggle child pages in navigation
- AWS Integration
  Toggle child pages in navigation
  - Amazon CloudFront
  - Amazon EC2
  - Amazon Elastic Container Service
    Toggle child pages in navigation
    - Amazon Elastic Container Service metrics
  - Amazon RDS
    Toggle child pages in navigation
    - Amazon RDS metrics
  - AWS Lambda
    Toggle child pages in navigation
    - AWS Lambda metrics
  - Elastic Load Balancing
    Toggle child pages in navigation
    - Elastic Load Balancing metrics
- Kubernetes Integration
- Linux Host Monitoring Integration
Worksheets
Tutorial: modeling weather data

Managing your Workspace

Workspace Settings

OPAL query Language

OPAL — Observe Processing and Analysis Language
Toggle child pages in navigation
All OPAL verbs
Toggle child pages in navigation
- OPAL Verbs By Category
  Toggle child pages in navigation
  - OPAL Aggregate Verbs
    Toggle child pages in navigation
    - aggregate
    - align
    - dedup
    - distinct
    - make_col
    - make_session
    - merge_events
    - rollup
    - statsby
    - timechart
    - bucketize
    - timestats
  - OPAL Filter Verbs
    Toggle child pages in navigation
    - always
    - ever
    - filter
    - never
    - topk
  - OPAL Join Verbs
    Toggle child pages in navigation
    - exists
    - flatten
    - flatten_all
    - flatten_leaves
    - flatten_single
    - follow
    - fulljoin
    - join
    - leftjoin
    - lookaround_join
    - lookup
    - surrounding
    - union
    - update_resource
  - OPAL Metadata Verbs
    Toggle child pages in navigation
    - add_key
    - colenum
    - colimmutable
    - colshow
    - droptime
    - interface
    - make_event
    - make_resource
    - make_session
    - merge_events
    - set_label
    - set_link
    - set_metric
    - set_primary_key
    - set_pk
    - set_valid_from
    - set_valid_to
    - unset_keys
    - unset_link
  - OPAL Metrics Verbs
    Toggle child pages in navigation
    - aggregate
    - align
    - rollup
    - set_metric
  - OPAL Misc Verbs
    Toggle child pages in navigation
  - OPAL Projection Verbs
    Toggle child pages in navigation
  - OPAL Deprecated Verb Aliases
    Toggle child pages in navigation
    - addfk
    - addkey
    - addmetric
    - changelog
    - coldrop
    - colmake
    - colpick
    - colregex
    - colrename
    - fkdrop
    - flattenall
    - flattenleaves
    - flattensingle
    - makeresource
    - makesession
    - merge_event
    - mergeevent
    - reaggregate
    - setlabel
    - setpk
    - setvf
    - setvt
All OPAL functions
Toggle child pages in navigation
- OPAL Functions By Category
  Toggle child pages in navigation
  - OPAL Aggregate Functions
    Toggle child pages in navigation
    - any
    - any_not_null
    - array_agg
    - avg
    - count
    - count_distinct
    - count_distinct_exact
    - deriv
    - first
    - first_not_null
    - last
    - last_not_null
    - max
    - median
    - median_exact
    - min
    - object_agg
    - percentile
    - percentile_cont
    - percentile_disc
    - rate
    - stddev
    - string_agg
    - sum
  - OPAL Boolean Functions
    Toggle child pages in navigation
    - bool
    - bool_null
    - contains
    - ends_with
    - eq
    - gt
    - gte
    - is_null
    - like
    - lt
    - lte
    - match_regex
    - ne
    - path_exists
    - search
    - starts_with
  - OPAL Misc Functions
    Toggle child pages in navigation
    - any_null
    - coalesce
    - frame
    - frame_exact
    - if
    - if_null
    - in
    - order_by
    - parse_json
    - position
    - string
    - string_null
  - OPAL Numeric Functions
    Toggle child pages in navigation
    - abs
    - array_length
    - avg
    - ceil
    - count
    - count_distinct
    - count_distinct_exact
    - dense_rank
    - deriv
    - exp
    - float64
    - float64_null
    - floor
    - hash
    - haversine_distance_km
    - int64
    - int64_null
    - ln
    - log
    - median
    - mod
    - numeric_null
    - parse_hex
    - percentile
    - percentile_cont
    - percentile_disc
    - pow
    - rank
    - rate
    - round
    - row_number
    - sqrt
    - stddev
    - strlen
  - OPAL Regex Functions
    Toggle child pages in navigation
  - OPAL Semistructured Functions
    Toggle child pages in navigation
    - array
    - array_agg
    - array_length
    - array_null
    - drop_fields
    - get_field
    - get_item
    - make_array
    - make_fields
    - make_object
    - match_regex
    - match_regex_all
    - object
    - object_agg
    - object_keys
    - object_null
    - parse_csv
    - parse_ip
    - parse_kvs
    - parse_url
    - path_exists
    - pick_fields
    - pivot_array
    - slice_array
    - split
    - tokenize
    - unpivot_array
  - OPAL Special Functions
    Toggle child pages in navigation
    - case
    - group_by
    - m
    - metric
    - options
    - primary_key
    - pk
    - valid_for
    - window
  - OPAL String Functions
    Toggle child pages in navigation
    - decode_base64
    - decode_uri
    - decode_uri_component
    - encode_base64
    - encode_uri
    - encode_uri_component
    - format_time
    - left
    - lower
    - lpad
    - ltrim
    - replace
    - replace_regex
    - right
    - rpad
    - rtrim
    - split_part
    - strcat
    - string_agg
    - substring
    - tokenize_part
    - trim
    - upper
  - OPAL Time Functions
    Toggle child pages in navigation
  - OPAL Window Functions
    Toggle child pages in navigation
    - any
    - any_not_null
    - avg
    - count
    - count_distinct
    - count_distinct_exact
    - dense_rank
    - deriv
    - first
    - first_not_null
    - lag
    - last
    - last_not_null
    - lead
    - max
    - median
    - median_exact
    - min
    - object_agg
    - percentile
    - percentile_cont
    - percentile_disc
    - rank
    - rate
    - row_number
    - stddev
    - sum
  - OPAL Deprecated Function Aliases
    Toggle child pages in navigation
    - array_pivot
    - array_unpivot
    - countdistinct
    - countdistinctexact
    - decodebase64
    - denserank
    - encodebase64
    - endswith
    - groupby
    - ifnull
    - isnull
    - makeobject
    - medianexact
    - milliseconds
    - nanoseconds
    - orderby
    - parsehex
    - parseip
    - parseisotime
    - parsejson
    - parsekvs
    - parseurl
    - percentilecont
    - percentiledisc
    - primarykey
    - queryendtime
    - querystarttime
    - regex_match
    - regex_replace
    - row_endtime
    - rownumber
    - seconds
    - startswith
    - validfor

Reference

Observe Glossary
Helpful Hints
Observe Datasets and Time
Toggle child pages in navigation
Observe Basic Data Processing Model
Observe release notes and updates
FAQ

Toggle table of contents sidebar

bucketize¶

bucketize is an alias of timechart.

Have comments about the Observe docs?