SELECT
statement not associated from a stream creation will send the results to the standard output interface (stdout), useful for debugging purposes.WHERE
statement. We will explain WINDOW
and GROUP BY
statements later in aggregation functions section.Since the TAG selector allows the use of wildcards, we put the value between single quotes.
SELECT
statement. New stream created can be optionally re-ingested back into Fluent Bit pipeline if the property Tag is set in the WITH statement.results_statement
on the keys, allowing to perform data calculation on groups of records. Group of records that aggregation functions apply on are determined by WINDOW
keyword. When WINDOW
is not specified, aggregation functions apply on the current buffer of records received, which may have non-deterministic number of elements. Aggregation functions can be applied on records in a window of a specific time interval (see the syntax of WINDOW
in select statement).GROUP BY
statement, which groups the results by the one or more keys, when they have the same values.WHERE
condition is supported in Fluent Bit query language. The language supports conditions over keys and subkeys, for instance:@record.contains
:NULL
: