formula 'if' :

extract using formula=if('kondisi kolom','then...', 'else...') as kolombaru from

source
contoh = extract using formula=(c1=='Indonesia','INA',c1) as c2 from tabel1
fungsi = menggunakan fungsi 'if' kondisi 'then' 'else'

======================================

penggunaan simbol '*' :

search from file 'namafile'* into source

contoh = search from file *2017* into tabel2017
fungsi = mencari seluruh nama file yg mengandung keyword '2017' dan menyimpannya
dalam source untuk diolah

======================================

multiple fungsi aggregate :

aggregate sum('namatabel1'), div('namatabel2','parameterdiv'), count(), ... ,

avg('namatabeln') as 'hasiltabel1', 'hasiltabel2', 'hasiltabel3', ... ,
'hasiltabeln' by 'tabelparameter' from 'source' into 'source2'
contoh : aggregate sum(price), count(), avg(price) as sumPriceByDate, JmlDate,
avgPriceByDate by produk from tokopedia into tokopedia2
fungsi : menghitung jml, rata2 harga dari suatu barang dan jg menghitung jml total
barang secara bersamaan pada suatu source

======================================

pemanggilan file dari database postgree :

search from 'jenis database' 'nama database yg terkoneksi' 'nama tabel dalam
database' into source
contoh = search from postgres lkpp_epns_prod agency into table_agency
fungsi = memanggil tabel 'agency' dari jenis database 'postgres' yg bernama
'lkpp_epns_prod agency'

pemanggilan file dari database oracle :

contoh = search from oracle lkpp_epns_prod agency into table_agency

fungsi = memanggil tabel 'agency' dari jenis database 'oracle' yg bernama
'lkpp_epns_prod agency'

pemanggilan file dari database sqlserver :

contoh = search from sqlserver lkpp_epns_prod agency into table_agency

fungsi = memanggil tabel 'agency' dari jenis database 'sqlserver' yg bernama
'lkpp_epns_prod agency'

pemanggilan file dari database hdfs :

contoh = search from hdfs lkpp_epns_prod agency into table_agency

fungsi = memanggil tabel 'agency' dari jenis database 'hdfs' yg bernama
'lkpp_epns_prod agency'

pemanggilan file dari database db2 :

contoh = search from db2 lkpp_epns_prod agency into table_agency

fungsi = memanggil tabel 'agency' dari jenis database 'db2' yg bernama
'lkpp_epns_prod agency'

pemanggilan file dari database mysql :

contoh = search from mysql lkpp_epns_prod agency into table_agency

fungsi = memanggil tabel 'agency' dari jenis database 'mysql' yg bernama
'lkpp_epns_prod agency'

pemanggilan file dari database splunk :

contoh = search from splunk lkpp_epns_prod agency into table_agency

fungsi = memanggil tabel 'agency' dari jenis database 'splunk' yg bernama
'lkpp_epns_prod agency'

======================================

multiple formula extract :

contoh : extract using formula

=if(substring(dateEFF,6,7)=='-',concat(substring(dateEFF,0,5),0,substring(dateEFF,5
,9)),dateEFF) as DATEEF from transaksill
fungsi : mengekstrak format tgl dari '1-1-2017' menjadi '01-01-2017'

======================================

store file with custom delimiter :

store from 'source' into file 'namaFile' with '{"delim":"jenisDelim"}'

contoh : store from Rekanan_Kota_LKPP into file Rekanan_LKPP_File.csv with
'{"delim":"|"}'
fungsi : menyetor data dari source 'Rekanan_Kato_LKPP' kedalam file bernama
'Rekanan_LKPP_File.csv' dengan delimiter '|'

======================================

unlimited concat query :

extract using formula=concat('kolom1',':','kolom2',':',...,':',...,'kolomn') as

'kolomBaru' from source
contoh : extract using formula=concat(namaBarang,':',harga,':',kodeBarang) as
rekap1 from dataPenjualan
fungsi : menyatukan kolom namaBarang, harga, dan kodeBarang menjadi 1 kolom yg
bernama dataPenjualan dengan pemisah ':'

======================================

penulisan kondisi lebih dari sama dengan ">=" :

extract using formula=if('kondisi','hasil then','hasil else') as 'kolomBaru' from

source
contoh : extract using formula=if( jml>10 or jml=10,'besar','kecil') as Ukuran from
Gudang
fungsi : membuat kolom baru yang bernama 'Ukuran' pada tabel Gudang yang berisi
besar/kecil berdasarkan kondisi pada kolom jml (jml>=10 maka 'besar', selain itu
'kceil')

======================================
penggunaan query "replace" :

extract using formula=replace('kolom','RegexkarakterBuang','karakterGanti') as

'kolomBaru' from source
contoh : extract using formula=(id,' ','-') as idBaru from dataPenjualan
fungsi : mengganti karakter spasi (' ') dalam kolom 'id' menjadi simbol '-' pada
kolom 'idBaru'

=======================================

menggunakan identifier titik "." pada regex :

extract using formula=replace('kolom','karakterBuang','karakterGanti') as

'kolomBaru' from source
contoh : extract using formula=(id,'\\.','') as idBaru from dataPenjualan
fungsi : menghapus karakter titik ('.') dalam kolom 'id' dan disimpan pada kolom
'idBaru'

======================================

search from folder :

search from folder 'path file dalam folder' into source

contoh : search from folder 'kofera/marts/keyword_performance/2016/01' into kf
fungsi : memanggil seluruh file dalam folder dari akun yg digunakan di mesin
terinstallnya paques dan ditampung dalam tabel 'kf'

======================================

penggunaan operasi hitung secara langsung :

extract using formula='operasi hitung' from source

contoh : extract using formula=((10000+500+11000-biaya)(100)/12) as
hasilPerhitungan from tabel_penjualan
fungsi : menghitung operasi hitung yg melibatkan kolom 'biaya' dari tabel
'tabel_penjualan' dan menampungnya pada kolom 'hasilPerhitungan'

=======================================

penggunaan extract length :

extract using length 'kolom' 'panjang len karakter' as 'kolom baru' from 'source'
contoh : extract using length date 4 as tahun from tabelPenjualan
fungsi : mengambil isi 4 karakter pertama dari kolom 'date' dan menyimpannya
kedalam kolom 'tahun'

=======================================

penggunaan aggregate max & min :

aggregate max('kolom') as 'kolom baru' by 'kolom pembatas' from 'source' into 'new
source'
aggregate min('kolom') as 'kolom baru' by 'kolom pembatas' from 'source' into 'new
source'
contoh : aggregate max(harga) as maxHarga by date from penjualan into penjualan2
fungsi : menentukan nilai maximal/minimal dari kolom 'harga' berdasarkan kolom
'date' di tabel 'penjualan' dan dialokasikan kedalam tabel baru 'penjualan2'
======================================

penggunaan filter dan multi filter :

view 'kolom' as "'kolom'::multi-filter", 'kolom' as "'kolom'::filter" from 'source'

contoh : view c1 as "c1::multi-filter", c2 as "c2::filter" from aa
fungsi : menampilkan value tabel sesuai pilihan pada visualisasi pada paques studio

======================================

penggunaan fungsi membuat array time interval :

extract using formula=timeInterval('kolom_start','kolom_end','minute') as

'kolom_new' from 'source'
contoh : extract using
formula=timeInterval(BEGIN_USEETV_SESS,END_USEETV_SESS,'minute') as explode_minute
from cdr
fungsi : membuat kolom berisi array interval waktu 'minute' untuk menit, 'second'
untuk detik, 'hour' untuk jam, 'date' untuk tanggal, 'month' untuk bulan, 'year'
untuk tahun

======================================

pembuatan table dalam index :

store from 'source' into index 'namaindex' table 'namatable'

contoh : store from cars into index carsIndex table mobil
fungsi : menyimpan file kedalam index carIndex tabel 'mobil'

======================================

penggunaan fungsi search pada formula :

extract using formula=search('namaKolom','karakter regex') as 'kolomBaru' from

'source'
contoh : extract using formula=search(DETAILS,'"New book"') as EVENTS_A from kai|
fungsi : mengidentifikasikan kolom EVENTS_A dengan karakter '0' jika pada kolom
'DETAILS' mengandung karakter regex '"New Book"', dan '-1' jika tidak.

=======================================

penggunaan fungsi implode :

implode 'kolom yg akan diimplode' by 'kolom parameter' as 'kolom baru' from

'source'
contoh : implode EVENT by BOOKREF as eventList from kai
fungsi : mengimplode (menggabungkan) data pada kolom 'EVENT' berdasarkan kolom
parameter 'BOOKREF' yang kemudian disimpan pada kolom 'eventList'

search from folder alarm02-07 into aa|

extract using split _event '=>' as alarmType,info from aa| filter on
len(alarmType)>20 from aa into junk| drop from junk|
filter on trim(alarmType)=='Modify Alarm syslog' from aa into modSyslog|
filter on trim(alarmType)=='Create Alarm syslog' from aa into creatSyslog|
filter on trim(alarmType)=='Data APN' from aa into apn|
extract using formula=replace(info,',','') as info2 from apn|
extract using split info2 ' ' as a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w from
apn|
view c as ip, e as apn, g as ActivePDP, i as Throughput, k as PDP_Success_Rate, m
as PingJitter, o as Packet_loss_EBR, q as PingRtt, s as ebr, u as time, w as ggsn
from apn|
extract using rex time '[0-9]+-[aA-zZ]+-[0-9]{4}' as date from apn|
extract using rex time '[0-9]{2}:[0-9]{2}' as jam from apn| filter on
PDP_Success_Rate=='NaN' or time==' ' or time=='' from apn into junk2| drop from
junk2| limit 100 from apn|

extract using rex info '\(.+\)' as info3 from modSyslog| extract using split info3
',' as c1,c2,c3,c4,c5,c6,c7,c8 from modSyslog| extract using formula=replace(c1,'\
(','') as c1a from modSyslog|
filter on c1=='no mib traps' from modSyslog into modSyslogMib| drop from
modSyslogMib|
filter on c1a=='radius_nomoreserver' from modSyslog into modSyslogRadius|
extract using formula=replace(c3,'[(]|[)]','') as errorCount from modSyslogRadius|
view _file,c1a as namaAlarm, c2 as alarmNotes, errorCount, c4 as ip, c5,c6,c7 as
dateTime, c8 from modSyslogRadius|

limit 100 from modSyslog|

limit 100 from creatSyslog|
limit 100 from modSyslogRadius