24 Apr 2025 09:38 AM
Hi,
I am trying to return some fields from dt.entity.host as well as data from dt.host.disk.used.percent.
However, when I try to append them, I get null values for Utilisation.
Here is my current DQL code:
fetch dt.entity.host
| fieldsAdd tags
| fieldsAdd entity.name
| expand tags
| append [
timeseries { percent = avg(dt.host.disk.used.percent), used = avg(dt.host.disk.used), avail = avg(dt.host.disk.avail) }, by: { dt.entity.host, dt.entity.disk }
| fieldsAdd Utilisation = arrayAvg(percent)
| fieldsAdd entityName(dt.entity.host)
]
Any ideas?
Solved! Go to Solution.
24 Apr 2025 01:09 PM - edited 24 Apr 2025 01:12 PM
You could either do a lookup:
timeseries { percent = avg(dt.host.disk.used.percent), used = avg(dt.host.disk.used), avail = avg(dt.host.disk.avail) }, by: { dt.entity.host, dt.entity.disk }
| fieldsAdd Utilisation = arrayAvg(percent)
| fieldsAdd entityName(dt.entity.host)
| lookup [ fetch dt.entity.host
| fields entity.name, id, tags ], sourceField:dt.entity.host, lookupField:id
or use the entityAttr:
timeseries { percent = avg(dt.host.disk.used.percent), used = avg(dt.host.disk.used), avail = avg(dt.host.disk.avail) }, by: { dt.entity.host, dt.entity.disk }
| fieldsAdd Utilisation = arrayAvg(percent)
| fieldsAdd entityName(dt.entity.host)
| fieldsAdd tags = entityAttr(dt.entity.host, "tags")