collect( ) Query Function

Collects fields from multiple events into one event.


Name Type Required Default Description
multival bool No true Collects the resulting value as multivalue (a single field value using separator).
fields [string] Yes Names of the fields to keep.
limit number No 2000 Limit to number of distint values in collect
separator string No Separator used for multiple values.

fields is the unnamed parameter.


Collects visitors, each visitor defined as non-active after one minute.

groupby(client_ip, function=session(maxpause=1m, collect([url])))