documentationupdate_resource¶
Type of operation: Join
Description¶
Augments the input Resource dataset using events from another dataset. The events must be mapped to the primary key or a candidate key of the input dataset, and then one or more fields are extracted from the events and added as new columns in the output resources.
Usage¶
update_resource [ options ], pkequalitypredicate_1, pkequalitypredicate_2, ..., columnbinding_1, columnbinding_2, ...
Argument |
Type |
Optional |
Repeatable |
Restrictions |
|---|---|---|---|---|
options |
options |
yes |
no |
constant |
pkequalitypredicate |
bool |
no |
yes |
none |
columnbinding |
expression |
no |
yes |
none |
Options¶
Option |
Type |
Meaning |
|---|---|---|
expiry |
duration |
How long state updates from the input events live for, before they revert to null (default 1h) |
Accelerable¶
update_resource is always accelerable if the input is accelerable. A dataset that only uses accelerable verbs can be accelerated, making queries on the dataset respond faster.
Examples¶
update_resource options(expiry:duration_hr(1)), [email protected], cpu:@cpuload.load
Look up the ‘host_uid’ value as the ‘host’ column in the event table named ‘cpuload’, and extract the ‘load’ column from that ‘cpuload’ table, calling the new column ‘cpu’ in the output resource.
Aliases¶
mergeevent(deprecated)merge_event(deprecated)