SELECTstatement not associated from a stream creation will send the results to the standard output interface (stdout), useful for debugging purposes.
WHEREstatement. We will explain
GROUP BYstatements later in aggregation functions section.
Since the TAG selector allows the use of wildcards, we put the value between single quotes.
SELECTstatement. New stream created can be optionally re-ingested back into Fluent Bit pipeline if the property Tag is set in the WITH statement.
results_statementon the keys, allowing to perform data calculation on groups of records. Group of records that aggregation functions apply on are determined by
WINDOWis not specified, aggregation functions apply on the current buffer of records received, which may have non-deterministic number of elements. Aggregation functions can be applied on records in a window of a specific time interval (see the syntax of
WINDOWin select statement).
GROUP BYstatement, which groups the results by the one or more keys, when they have the same values.
WHEREcondition is supported in Fluent Bit query language. The language supports conditions over keys and subkeys, for instance: