lookup( ) Query Function

Enhances events with metadata. Data can be managed in the Files tab in the UI or be uploaded as CSV or JSON files using the files endpoint.

Parameters

Name Type Required Default Description
from string Yes Specifies the source file.
include [string] No Specifies fields to include, defaults to all
on [string] Yes specifies which field(s) to join on; if passed as array the first is the field from the file, the second is from the event

from is the unnamed parameter.

Examples

lookup rows from table “users.csv” where the ‘userid’ column equals the ‘id’ field of this event

lookup("users.csv", on=[userid,id])