MIN_TIME_SERIES

Get the minimum value per time interval. This aggregation is useful for collecting time-series data for graphs. The size of the time intervals is configurable & dynamic; the time interval used will change depending on how many points you wish to hold per aggregation key ‌You can change the time interval and/or the number of points per interval to suit your graph.

Syntax

MIN_TIME_SERIES([MAX POINTS, INTERVALS, ]TIME, VALUE)

Arguments

MAX POINTS: The maximum amount of points to hold before reducing the resolution to the next interval size. (Default Value: 300) INTERVALS: An array of integers representing the time interval buckets to return data for. If the aggregation has more than MAX POINTS values in the given window it will use the next interval from this array to reduce the amount of points to comply with MAX POINTS. Default: [60000, 300000, 600000, 1800000, 3600000, 10800000, 21600000, 43200000, 86400000] TIME: An expression returning the time value that the VALUE is to be associated with. VALUE: An expression returning the value to aggregate in the provided TIME bucket.

Returns

An array of key value pairs, the key is the time (in epoch ms) and the value is of type VALUE and contains the average of the values within that time frame.

AVAILABLE IN

Output Type Availablity Aggregated Outputs NO Explicit Lookup Table YES Inline Joins\Lookups NO

Example 1

Collect from server metric events the max cpu over time in order to display on a graph in a web page.

Data

[
   {
      "serverIp":"10.0.0.1",
      "time":1628894700000,
      "cpuUsage":52.3
   },
   {
      "serverIp":"10.0.0.1",
      "time":1628894760000,
      "cpuUsage":2.4
   },
   {
      "serverIp":"10.0.0.1",
      "time":1628894820000,
      "cpuUsage":99.3
   },
   {
      "serverIp":"10.0.0.1",
      "time":1628894880000,
      "cpuUsage":99.6
   },
   {
      "serverIp":"10.0.0.1",
      "time":1628894940000,
      "cpuUsage":12.3
   },
   {
      "serverIp":"10.0.0.1",
      "time":1628895000000,
      "cpuUsage":55
   },
   {
      "serverIp":"10.0.0.2",
      "time":1628894700000,
      "cpuUsage":2.3
   },
   {
      "serverIp":"10.0.0.2",
      "time":1628894760000
   },
   {
      "serverIp":"10.0.0.2",
      "time":1628894820000,
      "cpuUsage":9.3
   },
   {
      "serverIp":"10.0.0.2",
      "time":1628894880000,
      "cpuUsage":9.6
   },
   {
      "serverIp":"10.0.0.2",
      "time":1628894940000,
      "cpuUsage":2.3
   }
]

Query

Find the minimum values for the time series, sorted by serverIPs:

SET
   Calculated_Date_Field = UNIX_EPOCH_TO_DATE(data.time);
SELECT
   data.serverIp AS serverip:STRING,
   MIN_TIME_SERIES (data.time, data.cpuUsage) AS min_cpu 
FROM
   "MAX_TIME_SERIES_ms_2" 
GROUP BY
   data.serverIp

Results

{
   "min_time_series_data_timedata_cpuusage":[
      {
         "key":1628894700000,
         "value":2.3
      },
      {
         "key":1628894820000,
         "value":9.3
      },
      {
         "key":1628894880000,
         "value":9.6
      },
      {
         "key":1628894940000,
         "value":2.3
      }
   ],
   "serverip":"10.0.0.2"
}{
   "min_time_series_data_timedata_cpuusage":[
      {
         "key":1628894700000,
         "value":52.3
      },
      {
         "key":1628894760000,
         "value":2.4
      },
      {
         "key":1628894820000,
         "value":99.3
      },
      {
         "key":1628894880000,
         "value":99.6
      },
      {
         "key":1628894940000,
         "value":12.3
      },
      {
         "key":1628895000000,
         "value":55
      }
   ],
   "serverip":"10.0.0.1"
}

Example 2

Data

{
   "serverIp":"10.0.0.1",
   "time":1628894700,
   "cpuUsage":52.3
}{
   "serverIp":"10.0.0.1",
   "time":1628894760,
   "cpuUsage":2.42
}{
   "serverIp":"10.0.0.1",
   "time":1628894820,
   "cpuUsage":99.3
}{
   "serverIp":"10.0.0.1",
   "time":1628894880,
   "cpuUsage":99.6
}{
   "serverIp":"10.0.0.1",
   "time":1628894940,
   "cpuUsage":12.3
}{
   "serverIp":"10.0.0.1",
   "time":1628895000,
   "cpuUsage":55.0
}

Query

Find the minimum values for the time series, sorted by serverIPs, but within a specific interval:

SELECT 
   data.serverIp AS serverip:STRING,
   MIN_TIME_SERIES(2, [60000, 300000], data.time, data.cpuUsage) AS min_cpu
FROM 
   TIME_SERIES_DATA_w_NULL
GROUP BY 
   data.serverIp

Results

{
   "serverip":"10.0.0.2",
   "min_cpu":[
      {
         "value":2.3,
         "key":1628894700000
      }
   ]
}{
   "serverip":"10.0.0.1",
   "min_cpu":[
      {
         "value":2.4,
         "key":1628894700000
      },
      {
         "value":55,
         "key":1628895000000
      }
   ]
}

Related Functions

MIN_TIME_SERIES LAST_TIME_SERIES MAX_TIME_SERIES

Dialog