topic Re: DQL timeseries: aggregate data based on lookup fields in DQL

DQL timeseries: aggregate data based on lookup fields

Adrien_Z — Mon, 14 Aug 2023 21:11:37 GMT

Hello,

I'm trying to group a timeseries based on new fields I fetch after a lookup.

So basically, I'm fetching a timeseries (here dt.kubernetes.node_conditions). Then, I lookup the kubernetes nodes to get a specific label and the managementZone.

After that, I would like to group the timeseries based on this label and the management zone.

For example:

timeseries avg(dt.kubernetes.node.conditions), by:{dt.entity.kubernetes_node}, interval: 10m | lookup [fetch dt.entity.kubernetes_node], sourceField:dt.entity.kubernetes_node, lookupField:id | fieldsAdd node_type = lookup.kubernetesLabels[`kube/nodetype`], managementZone = lookup.managementZones

I didn't find a way to group the timeseries avg(dt.kubernetes.node.conditions) based on these new fields.

Is it something possible ?

Re: DQL timeseries: aggregate data based on lookup fields

fcourbon — Wed, 16 Aug 2023 09:30:00 GMT

Hello @Adrien_Z , what kind of output are you expecting ? A time series or a single scalar per node_type (or managementZone)?

Re: DQL timeseries: aggregate data based on lookup fields

Adrien_Z — Wed, 16 Aug 2023 12:24:02 GMT

Hello,

I want a time series per node_type that will represent the sum of the timeseries of all nodes having this node_type.

for example:

Let me know if you need more information

Re: DQL timeseries: aggregate data based on lookup fields

fcourbon — Wed, 16 Aug 2023 15:02:16 GMT

Thanks for the additional information, this will be possible with an enhancement that will be delivered this year. I will revert with the syntax once it is made available.

Re: DQL timeseries: aggregate data based on lookup fields

Adrien_Z — Thu, 17 Aug 2023 17:44:25 GMT

Hello,

Thank you for the information.

I'll wait for the update of this tread

Re: DQL timeseries: aggregate data based on lookup fields

Tommaso_Fin — Mon, 11 Mar 2024 15:24:33 GMT

Hi,

I would need this feature too. Since 2023 is over, is it possible now to do so?

thanks

Re: DQL timeseries: aggregate data based on lookup fields

krzysztof_hoja — Tue, 12 Mar 2024 18:40:06 GMT

It is possible right now. Using the initial example it would look like time:

timeseries cond=avg(dt.kubernetes.node.conditions), by:{dt.entity.kubernetes_node}, interval: 10m | lookup [fetch dt.entity.kubernetes_node], sourceField:dt.entity.kubernetes_node, lookupField:id | fieldsAdd node_type = lookup.kubernetesLabels[`kube/nodetype`], managementZone = lookup.managementZones | summarize {cond=sum(cond[])}, by:{node_type, managementZone, interval, timeframe}

-Kris

Re: DQL timeseries: aggregate data based on lookup fields

Tommaso_Fin — Wed, 13 Mar 2024 13:24:03 GMT

Thanks, it work fine, even if I would never find the solution without your help. The sintax is not really simple

Re: DQL timeseries: aggregate data based on lookup fields

krzysztof_hoja — Wed, 13 Mar 2024 13:42:47 GMT

For future reference:
https://docs.dynatrace.com/docs/platform/grail/dynatrace-query-language/commands/aggregation-commands#summarize
Example 6

Re: DQL timeseries: aggregate data based on lookup fields

Adrien_Z — Wed, 13 Mar 2024 14:48:30 GMT

Thank you. It is working now and thanks for the example.

Re: DQL timeseries: aggregate data based on lookup fields

m_zol — Fri, 18 Jul 2025 13:50:12 GMT

Hello,

thanks for the example, it helped me in parts.
Seems the result above comes in a table. Is there any way to timeseries the data again?

Re: DQL timeseries: aggregate data based on lookup fields

m_zol — Fri, 18 Jul 2025 14:51:23 GMT

Nevermind, with the example provided did work. I don't know the reason it was not working before.