Humio’s query functions take a set of events, parameters, or configurations; and produce, reduce, or modify values within that set, or within the events themselves within the query pipeline.
Below is an alphabetical listing of Humio query functions related to events. For more information on a particular query function, click on it.
|copyEvent( )||Duplicates event so pipeline will see both events.|
|default( )||Creates a field to given parameter and given value.|
|drop( )||Removes attributes or columns from a result set.|
|dropEvent( )||Drops completely an event in parser pipeline to stop it from being ingested.|
|eventFieldCount( )||Returns number of fields event uses internally for the values.|
|eventInternals( )||Adds a set of fields describing the storage locations of given event.|
|eventSize( )||Returns byte count event uses internally for the values, not including field names.|
|hashRewrite( )||Calculates a secure hash of a field for storing in the event.|
|sample( )||Samples the event stream.|
|select( )||Used to specify a set of fields to select from each event.|
|selectLast( )||Specify fields to select from events, keeping value of most recent event for each field.|