2018-12-13 14:47:20 -05:00
|
|
|
---
|
|
|
|
layout: doc_page
|
|
|
|
title: "Filter groupBy Query Results"
|
|
|
|
---
|
|
|
|
|
2018-11-13 12:38:37 -05:00
|
|
|
<!--
|
|
|
|
~ Licensed to the Apache Software Foundation (ASF) under one
|
|
|
|
~ or more contributor license agreements. See the NOTICE file
|
|
|
|
~ distributed with this work for additional information
|
|
|
|
~ regarding copyright ownership. The ASF licenses this file
|
|
|
|
~ to you under the Apache License, Version 2.0 (the
|
|
|
|
~ "License"); you may not use this file except in compliance
|
|
|
|
~ with the License. You may obtain a copy of the License at
|
|
|
|
~
|
|
|
|
~ http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
~
|
|
|
|
~ Unless required by applicable law or agreed to in writing,
|
|
|
|
~ software distributed under the License is distributed on an
|
|
|
|
~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
|
|
~ KIND, either express or implied. See the License for the
|
|
|
|
~ specific language governing permissions and limitations
|
|
|
|
~ under the License.
|
|
|
|
-->
|
|
|
|
|
2015-05-05 17:07:32 -04:00
|
|
|
# Filter groupBy Query Results
|
2018-12-12 23:42:12 -05:00
|
|
|
|
2015-05-05 17:07:32 -04:00
|
|
|
A having clause is a JSON object identifying which rows from a groupBy query should be returned, by specifying conditions on aggregated values.
|
|
|
|
|
|
|
|
It is essentially the equivalent of the HAVING clause in SQL.
|
|
|
|
|
|
|
|
Druid supports the following types of having clauses.
|
|
|
|
|
2016-12-02 13:04:30 -05:00
|
|
|
### Query filters
|
|
|
|
|
|
|
|
Query filter HavingSpecs allow all [Druid query filters](filters.html) to be used in the Having part of the query.
|
|
|
|
|
|
|
|
The grammar for a query filter HavingSpec is:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type" : "filter",
|
|
|
|
"filter" : <any Druid query filter>
|
|
|
|
}
|
2016-12-02 13:04:30 -05:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
For example, to use a selector filter:
|
|
|
|
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type" : "filter",
|
|
|
|
"filter" : {
|
|
|
|
"type": "selector",
|
|
|
|
"dimension" : "<dimension>",
|
|
|
|
"value" : "<dimension_value>"
|
|
|
|
}
|
|
|
|
}
|
2016-12-02 13:04:30 -05:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
2017-03-15 13:59:09 -04:00
|
|
|
You can use "filter" HavingSpecs to filter on the timestamp of result rows by applying a filter to the "\_\_time"
|
|
|
|
column.
|
2016-12-02 13:04:30 -05:00
|
|
|
|
2015-05-05 17:07:32 -04:00
|
|
|
### Numeric filters
|
|
|
|
|
|
|
|
The simplest having clause is a numeric filter.
|
|
|
|
Numeric filters can be used as the base filters for more complex boolean expressions of filters.
|
|
|
|
|
|
|
|
Here's an example of a having-clause numeric filter:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "greaterThan",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
#### Equal To
|
|
|
|
|
|
|
|
The equalTo filter will match rows with a specific aggregate value.
|
|
|
|
The grammar for an `equalTo` filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "equalTo",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
This is the equivalent of `HAVING <aggregate> = <value>`.
|
|
|
|
|
|
|
|
#### Greater Than
|
|
|
|
|
|
|
|
The greaterThan filter will match rows with aggregate values greater than the given value.
|
|
|
|
The grammar for a `greaterThan` filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "greaterThan",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
This is the equivalent of `HAVING <aggregate> > <value>`.
|
|
|
|
|
|
|
|
#### Less Than
|
|
|
|
|
|
|
|
The lessThan filter will match rows with aggregate values less than the specified value.
|
|
|
|
The grammar for a `greaterThan` filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "lessThan",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
This is the equivalent of `HAVING <aggregate> < <value>`.
|
|
|
|
|
2015-11-24 09:22:37 -05:00
|
|
|
|
|
|
|
|
|
|
|
### Dimension Selector Filter
|
|
|
|
|
|
|
|
#### dimSelector
|
|
|
|
|
|
|
|
The dimSelector filter will match rows with dimension values equal to the specified value.
|
|
|
|
The grammar for a `dimSelector` filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "dimSelector",
|
|
|
|
"dimension": "<dimension>",
|
|
|
|
"value": <dimension_value>
|
|
|
|
}
|
2015-11-24 09:22:37 -05:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
|
2015-05-05 17:07:32 -04:00
|
|
|
### Logical expression filters
|
|
|
|
|
|
|
|
#### AND
|
|
|
|
|
|
|
|
The grammar for an AND filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "and",
|
|
|
|
"havingSpecs": [
|
|
|
|
{
|
|
|
|
"type": "greaterThan",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"type": "lessThan",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
#### OR
|
|
|
|
|
|
|
|
The grammar for an OR filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "or",
|
|
|
|
"havingSpecs": [
|
|
|
|
{
|
|
|
|
"type": "greaterThan",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"type": "equalTo",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
|
|
|
]
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
#### NOT
|
|
|
|
|
|
|
|
The grammar for a NOT filter is as follows:
|
|
|
|
|
|
|
|
```json
|
|
|
|
{
|
2018-05-14 16:43:42 -04:00
|
|
|
"queryType": "groupBy",
|
|
|
|
"dataSource": "sample_datasource",
|
|
|
|
...
|
|
|
|
"having":
|
|
|
|
{
|
|
|
|
"type": "not",
|
|
|
|
"havingSpec":
|
|
|
|
{
|
|
|
|
"type": "equalTo",
|
|
|
|
"aggregation": "<aggregate_metric>",
|
|
|
|
"value": <numeric_value>
|
|
|
|
}
|
|
|
|
}
|
2015-05-05 17:07:32 -04:00
|
|
|
}
|
|
|
|
```
|