A calculated field is a field that wasn't a part of an incoming event. It is added into the event by using one of Upsolver's functions.
Examples: extracting city from IP, running a regular expression or performing a mathematical operation.
- Calculated Fields do not create any physical storage - they are executed at run-time if they are needed in a deployed Materialized View, Output or Pipeline.
- Functions input parameters - limited to fields in the incoming event, constant values and other Calculated Fields. It's possible to use fields from various hierarchical locations.
- Functions output parameter - a single value or an array that can be placed at any hierarchical location within the event.
- Functions are built to handle both single values and arrays so be sure to check each one in the documentation.
Aggregations are functions for grouping multiple events together to form a more significant result.
Unlike databases, Upsolver runs continuous queries and not ad-hoc queries. Therefore, aggregation results are incrementally updated with every incoming event.
Aggregation functions require windowing to split a stream into buckets of data that can be aggregated.
Aggregation functions can return a single value or a hash table as explained in each function.