How do I merge DQL queries together?

badgerfifteen — Thu, 24 Apr 2025 08:38:36 GMT

Hi,

I am trying to return some fields from dt.entity.host as well as data from dt.host.disk.used.percent.

However, when I try to append them, I get null values for Utilisation.

Here is my current DQL code:

fetch dt.entity.host
| fieldsAdd tags
| fieldsAdd entity.name
| expand tags
| append [
timeseries { percent = avg(dt.host.disk.used.percent), used = avg(dt.host.disk.used), avail = avg(dt.host.disk.avail) }, by: { dt.entity.host, dt.entity.disk }
| fieldsAdd Utilisation = arrayAvg(percent)
| fieldsAdd entityName(dt.entity.host)
]

Any ideas?

Re: How do I merge DQL queries together?

sia_h — Thu, 24 Apr 2025 12:12:46 GMT

You could either do a lookup:

timeseries { percent = avg(dt.host.disk.used.percent), used = avg(dt.host.disk.used), avail = avg(dt.host.disk.avail) }, by: { dt.entity.host, dt.entity.disk } | fieldsAdd Utilisation = arrayAvg(percent) | fieldsAdd entityName(dt.entity.host) | lookup [ fetch dt.entity.host | fields entity.name, id, tags ], sourceField:dt.entity.host, lookupField:id

or use the entityAttr:

timeseries { percent = avg(dt.host.disk.used.percent), used = avg(dt.host.disk.used), avail = avg(dt.host.disk.avail) }, by: { dt.entity.host, dt.entity.disk } | fieldsAdd Utilisation = arrayAvg(percent) | fieldsAdd entityName(dt.entity.host) | fieldsAdd tags = entityAttr(dt.entity.host, "tags")

topic Re: How do I merge DQL queries together? in DQL

How do I merge DQL queries together?

Re: How do I merge DQL queries together?