outputKey
and outputName
.
name | description | default value |
---|---|---|
component.dataSource | ThirdEye datasource to use. | |
component.query | Query to execute. The query can use macros. |
Macro example | description |
---|---|
__timeFilter( timeColumn, 'timeFormat' ) | Replaced by a time range filter on the timeframe [detectionStart, detectionEnd[ using the specified column name and the specified timeFormat. For example, __timeFilter(timeColumn, 'EPOCH_MILLIS') is replaced by timeColumn >= 1494410242000 AND timeColumn < 1494410242000) |
__timeFilter( timeColumn, 'timeFormat,' 'lookbackFromStartPeriod' ) | Replaced by a time range filter on the timeframe [detectionStart-lookbackFromStartPeriod, detectionEnd[ . For example, for a detection between January 14 and January 15, __timeFilter(timeColumn, 'yyyyMMdd', 'P7D') is replaced by timeColumn >= '20220107' AND timeColumn < '20220115') |
__timeFilter( timeColumn, 'timeFormat,' 'lookbackFromStartPeriod,' 'lookbackFromEndPeriod' ) | Replaced by a time range filter on the timeframe [detectionStart-lookbackFromStartPeriod, detectionEnd-lookbackFromEndPeriod[ . For example, for a detection between January 14 and January 15, __timeFilter(timeColumn, 'yyyyMMdd', 'P7D', 'P7D') is replaced by timeColumn >= '20220107' AND timeColumn < '20220108') |
__timeGroup( timeColumn, 'timeFormat', 'granularity' ) | Replaced by a transformation of the timeColumn in bins of the given granularity, in milliseconds. Respects the timezone of the alert. For example, __timeGroup(timeColumn, 'yyyyMMddhh', 'P1D') is replaced by DATETIMECONVERT(timeColumn, '1:DAYS:SIMPLE_DATE_FORMAT:yyyyMMddhh', '1:MILLISECONDS:EPOCH', '1:DAYS') |
timeColumn
value is AUTO
, the macro resolves to the primary time column of the table.timeFormat
is obtained internally and can be left blank.
For example:
__timeFilter(AUTO,'')
__timeGroup(AUTO,'','P1D')
String | description | aliases |
---|---|---|
EPOCH_MILLIS | time column is in milliseconds since unix epoch | 1:MILLISECONDS:EPOCH |
EPOCH | time column is in seconds since unix epoch | 1:SECONDS:EPOCH |
EPOCH_MINUTES | time column is in minutes since unix epoch | 1:MINUTES:EPOCH |
EPOCH_HOURS | time column is in hours since unix epoch | 1:HOURS:EPOCH |
EPOCH_DAYS | time column is in days since unix epoch | 1:DAYS:EPOCH |
any SimpleDateFormat string | See SimpleDateFormat documentation. Eg yyyyMMdd , yyyy-MM-dd'T'HH:mm:ss.SSSZ | 1:DAYS:SIMPLE_DATE_FORMAT:[SIMPLE_DATE_FORMAT] |
'P7D'
: 7 days'PT1H'
: 1 hour