Join functions

• Latest Dynatrace
• Reference
• Updated on Jun 27, 2025

Functions that join records from subqueries.

lookup

Returns a record from a subquery (the lookup table) producing a match between a field in the source table (sourceField) and a field in the lookup table (lookupField).

In contrast to the lookup command, the lookup function nests all included fields in the form of a DQL record.

In a case, where more than one match is produced in the lookup table, only the first matching record of the lookup table is returned. When the key values in the source and lookup table are both null, corresponding records aren't matched.

Syntax

lookup(lookupTable, lookupField [, sourceField] [, executionOrder])

Parameters

Returns

The data type of the returned value is record.

Examples

Example 1

data record(location = "Vienna", bookings = 1337),
     record(location = "London", bookings = 2431)
| fieldsAdd result = lookup([
    data record(city = "Vienna", country = "Austria"),
         record(city = "Barcelona", country = "Spain")
    ],
    sourceField:location,
    lookupField:city)

Query result:

Example 2

In a case, where more than one match is produced in the lookup table, only the first matching record of the lookup table is returned.

data record(location = "Barcelona"),
     record(location = "London")
| fieldsAdd result = lookup([
    data record(team = "FC Barcelona", city = "Barcelona"),
         record(team = "Chelsea", city = "London"),
         record(team = "FC Arsenal", city = "London"),
         record(team = "Tottenham Hotspur", city = "London")
    ],
    sourceField:location,
    lookupField:city)

Query result:

Limits

The same limits as described for the join command apply.

getNodeName

Preview

Returns the Smartscape node name.

Syntax

getNodeName(expression)

Parameters

Returns

The data type of the returned value is string.

Examples

Example 1

fetch bizevents
| fieldsAdd getNodeName(dt.smartscape.host)

getNodeField

Preview

Returns the field value for a Smartscape node.

Syntax

getNodeField(expression, name)

Parameters

Returns

The data type of the returned value can be boolean, long, double, timestamp, timeframe, duration, string, ip, uid, binary, array, or record.

Examples

Example 1

timeseries avg(dt.host.cpu.idle), by:{ dt.smartscape.host }
| fieldsAdd getNodeField(dt.smartscape.host, "tags")