GROUP_BY
can now group an array by the results of a LAMBDA
function.
Example:
alerts = [
{ "name": "Failed Login", "severity": 8, "source": "firewall" },
{ "name": "Config Change", "severity": 5, "source": "audit" },
{ "name": "Disk Space Low", "severity": 3, "source": "monitoring" },
{ "name": "Malware Detected", "severity": 9, "source": "endpoint" }
]
GROUP_BY(alerts, LAMBDA(alert, IF(alert['severity'] > 7, 'high', 'low'))))
Returns:
{
"high": [
{ "name": "Failed Login", "severity": 8, "source": "firewall" },
{ "name": "Malware Detected", "severity": 9, "source": "endpoint" }
],
"low": [
{ "name": "Config Change", "severity": 5, "source": "audit" },
{ "name": "Disk Space Low", "severity": 3, "source": "monitoring" }
]
}
For more information, see our documentation.