map <subquery> using <view_name>
The following table lists the parameters used in this command, along with their descriptions.
The subquery to describe the new properties to associate with the groups. It has two parts:
The name of the view to use in the
For examples of using this command in typical scenarios, see:
- Join Multiple Groups Using the Map Command in Using Oracle Log Analytics
The following command creates a property to mark all the entity groups with application error:
* | link Entity, Label | createview [ * | where Label = 'Application Error' | rename Entity as 'Application Error Entity' ] as 'Application Error View' | map [ * | where Entity = 'Application Error Entity' | eval 'Has Issue' = Yes ] using 'Application Error View'