summaryrefslogtreecommitdiff
path: root/docs/processor/udaf.md
diff options
context:
space:
mode:
Diffstat (limited to 'docs/processor/udaf.md')
-rw-r--r--docs/processor/udaf.md38
1 files changed, 38 insertions, 0 deletions
diff --git a/docs/processor/udaf.md b/docs/processor/udaf.md
index 66d6ad5..f305201 100644
--- a/docs/processor/udaf.md
+++ b/docs/processor/udaf.md
@@ -9,7 +9,9 @@
- [First Value](#First-Value)
- [Last Value](#Last-Value)
- [Long Count](#Long-Count)
+- [Max](#Max)
- [MEAN](#Mean)
+- [Min](#Min)
- [Number SUM](#Number-SUM)
- [HLLD](#HLLD)
- [Approx Count Distinct HLLD](#Approx-Count-Distinct-HLLD)
@@ -116,6 +118,23 @@ Example
output_fields: [sessions]
```
+### Max
+
+MAX is used to get the maximum value of the field in the group of events.
+
+```MAX(filter, lookup_fields, output_fields)```
+- filter: optional
+- lookup_fields: required. Now only support one field.
+- output_fields: optional. If not set, the output field name is `lookup_field_name`.
+
+Example
+
+```yaml
+- function: MAX
+ lookup_fields: [receive_time]
+ output_fields: [receive_time]
+```
+
### Mean
MEAN is used to calculate the mean value of the field in the group of events. The lookup field value must be a number.
@@ -135,6 +154,25 @@ Example
output_fields: [received_bytes_mean]
```
+
+### Min
+
+MIN is used to get the minimum value of the field in the group of events.
+
+```MIN(filter, lookup_fields, output_fields)```
+- filter: optional
+- lookup_fields: required. Now only support one field.
+- output_fields: optional. If not set, the output field name is `lookup_field_name`.
+
+Example
+
+```yaml
+- function: MIN
+ lookup_fields: [receive_time]
+ output_fields: [receive_time]
+```
+
+
### Number SUM
NUMBER_SUM is used to sum the value of the field in the group of events. The lookup field value must be a number.