topic Re: Find all host_groups with hosts that have a specific tag in DQL

Find all host_groups with hosts that have a specific tag

sinisa_zubic — Wed, 31 May 2023 14:03:57 GMT

Hi there,

How would one find all host_groups with hosts that have a specific tag? Something like:

fetch dt.entity.host_group
| filter in(id,[fetch dt.entity.host |filter matchesValue(tags,"MyTag")|fields id])

I still struggle a bit with DQL syntax…

Do I need a FilterIn, a Lookup, etc?

Best,
Sini

Re: Find all host_groups with hosts that have a specific tag

stefan_eggersto — Mon, 19 Jun 2023 09:27:21 GMT

You need to join the 2 tables using lookup and then do a filter. Please try following DQL:

fetch dt.entity.host_group
| lookup [fetch dt.entity.host
| filter matchesPhrase(tags,"MyTag")
| fieldsAdd hostGroupReference = instance_of[dt.entity.host_group]], sourceField:id, lookupField:hostGroupReference
| filter isNotNull(lookup.id)
| fieldsRemove "lookup*"

Some explanation

first fetch all host groups
then do a lookup for hosts filtered by the tag.
hosts are linked to the host groups by the field instance_of[dt.entity.host_group]
then filter on hosts groups which have the field lookup.id . Basically filter only those host groups which have match from the lookup

Re: Find all host_groups with hosts that have a specific tag

SGOconnell1 — Wed, 04 Sep 2024 19:44:51 GMT

How would one go about this using timeseries data? Same thing?

i.e. I have a query for disk space by a single host filter that works, but i want to leverage Host Group rather than dt.entity.host for my filter value.

Re: Find all host_groups with hosts that have a specific tag

krzysztof_hoja — Thu, 05 Sep 2024 18:43:25 GMT

Even simpler then it was possible 1 year ago. E.g. to get disk usage for all disks of hosts in specific host group:

timeseries disk_used=max(dt.host.disk.used), by:{dt.entity.host, dt.entity.disk}, filter: {entityName(dt.entity.host_group)=="vmware"}