collect( ) Query Function

Collects fields from multiple events into one event.

Parameters

Name Type Required Default Description
multival bool No true Collects the resulting value as multivalue (a single field value using separator).
fields [string] Yes Names of the fields to keep.
limit number No 2000 Limit to number of distint values in collect
separator string No Separator used for multiple values.

fields is the unnamed parameter.

Examples

Collects visitors, each visitor defined as non-active after one minute.

groupby(client_ip, function=session(maxpause=1m, collect([url])))