mirror of https://github.com/grafana/loki
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1058 lines
38 KiB
1058 lines
38 KiB
3 years ago
|
package logql
|
||
|
|
|
||
|
|
import (
|
||
|
|
"testing"
|
||
|
|
"time"
|
||
|
|
|
||
|
|
"github.com/stretchr/testify/require"
|
||
|
|
)
|
||
|
|
|
||
|
|
func Test_SplitRangeInterval(t *testing.T) {
|
||
|
|
rvm, err := NewRangeMapper(2 * time.Second)
|
||
|
|
require.NoError(t, err)
|
||
|
|
|
||
|
|
for _, tc := range []struct {
|
||
|
|
expr string
|
||
|
|
expected string
|
||
|
|
}{
|
||
|
|
{
|
||
|
|
`bytes_over_time({app="foo"}[3s])`,
|
||
|
|
`sum without(
|
||
|
|
downstream<bytes_over_time({app="foo"}[1s] offset 2s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[2s]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count_over_time({app="foo"}[5s])`,
|
||
|
|
`sum without(
|
||
|
|
downstream<count_over_time({app="foo"}[1s] offset 4s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[2s] offset 2s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[2s]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`rate({app="foo"}[4s] offset 1m)`,
|
||
|
|
`(sum without(
|
||
|
|
downstream<count_over_time({app="foo"}[2s] offset 1m2s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[2s] offset 1m0s), shard=<nil>>
|
||
|
|
) / 4)`,
|
||
|
|
},
|
||
|
|
} {
|
||
|
|
tc := tc
|
||
|
|
t.Run(tc.expr, func(t *testing.T) {
|
||
|
|
t.Parallel()
|
||
|
|
noop, mappedExpr, err := rvm.Parse(tc.expr)
|
||
|
|
require.NoError(t, err)
|
||
|
|
require.Equal(t, removeWhiteSpace(tc.expected), removeWhiteSpace(mappedExpr.String()))
|
||
|
|
require.Equal(t, false, noop)
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func Test_SplitRangeVectorMapping(t *testing.T) {
|
||
|
|
rvm, err := NewRangeMapper(time.Minute)
|
||
|
|
require.NoError(t, err)
|
||
|
|
|
||
|
|
for _, tc := range []struct {
|
||
|
|
expr string
|
||
|
|
expected string
|
||
|
|
}{
|
||
|
|
// Range vector aggregators
|
||
|
|
{
|
||
|
|
`bytes_over_time({app="foo"}[3m])`,
|
||
|
|
`sum without(
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count_over_time({app="foo"}[3m])`,
|
||
|
|
`sum without(
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum_over_time({app="foo"} | unwrap bar [3m])`,
|
||
|
|
`sum without(
|
||
|
|
downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max_over_time({app="foo"} | unwrap bar [3m])`,
|
||
|
|
`max without(
|
||
|
|
downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max_over_time({app="foo"} | json | unwrap bar [3m]) by (bar)`,
|
||
|
|
`max by (bar) (
|
||
|
|
downstream<max_over_time({app="foo"} | json | unwrap bar [1m] offset 2m0s) by (bar), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | json | unwrap bar [1m] offset 1m0s) by (bar), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | json | unwrap bar [1m]) by (bar), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max_over_time({app="foo"} | unwrap bar [3m]) by (baz)`,
|
||
|
|
`max by (baz) (
|
||
|
|
downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m]) by (baz), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min_over_time({app="foo"} | unwrap bar [3m])`,
|
||
|
|
`min without(
|
||
|
|
downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min_over_time({app="foo"} | unwrap bar [3m]) by (baz)`,
|
||
|
|
`min by (baz) (
|
||
|
|
downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m]) by (baz), shard=<nil>>
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`rate({app="foo"}[3m])`,
|
||
|
|
`(sum without(
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) / 180)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`bytes_rate({app="foo"}[3m])`,
|
||
|
|
`(sum without(
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) / 180)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - sum
|
||
|
|
{
|
||
|
|
`sum(bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`sum(
|
||
|
|
sum without (
|
||
|
|
downstream<sum(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(count_over_time({app="foo"}[3m]))`,
|
||
|
|
`sum(
|
||
|
|
sum without (
|
||
|
|
downstream<sum(count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`sum(
|
||
|
|
sum without (
|
||
|
|
downstream<sum(sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(sum_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`sum(
|
||
|
|
max without (
|
||
|
|
downstream<sum(max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(max_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`sum(
|
||
|
|
max by (baz) (
|
||
|
|
downstream<sum(max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum(max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum(max_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`sum(
|
||
|
|
min without (
|
||
|
|
downstream<sum(min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(min_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`sum(
|
||
|
|
min by (baz) (
|
||
|
|
downstream<sum(min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum(min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum(min_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(rate({app="foo"}[3m]))`,
|
||
|
|
`sum(
|
||
|
|
(sum without (
|
||
|
|
downstream<sum(count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`sum(
|
||
|
|
(sum without (
|
||
|
|
downstream<sum(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - sum by
|
||
|
|
{
|
||
|
|
`sum by (baz) (bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<sum by (baz) (bytes_over_time({app="foo"} [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (bytes_over_time({app="foo"} [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (bytes_over_time({app="foo"} [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (count_over_time({app="foo"}[3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<sum by (baz) (count_over_time({app="foo"} [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (count_over_time({app="foo"} [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (count_over_time({app="foo"} [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<sum by (baz) (sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (sum_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
max without (
|
||
|
|
downstream<sum by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (max_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
max by (baz) (
|
||
|
|
downstream<sum by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (max_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
min without (
|
||
|
|
downstream<sum by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (min_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
min by (baz) (
|
||
|
|
downstream<sum by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (min_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (rate({app="foo"}[3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<sum by (baz) (count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (baz) (bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`sum by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<sum by (baz) (bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (baz) (bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - count
|
||
|
|
{
|
||
|
|
`count(bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`count(
|
||
|
|
sum without (
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(count_over_time({app="foo"}[3m]))`,
|
||
|
|
`count(
|
||
|
|
sum without (
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`count(
|
||
|
|
sum without (
|
||
|
|
downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`count(
|
||
|
|
max without (
|
||
|
|
downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`count(
|
||
|
|
max by (baz) (
|
||
|
|
downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m]) by (baz), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`count(
|
||
|
|
min without (
|
||
|
|
downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`count(
|
||
|
|
min by (baz) (
|
||
|
|
downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m]) by (baz), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(rate({app="foo"}[3m]))`,
|
||
|
|
`count(
|
||
|
|
(sum without (
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count(bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`count(
|
||
|
|
(sum without (
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - count by
|
||
|
|
{
|
||
|
|
`count by (baz) (bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (count_over_time({app="foo"}[3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
max without (
|
||
|
|
downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`count by (baz) (
|
||
|
|
max by (baz) (
|
||
|
|
downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<max_over_time({app="foo"} | unwrap bar [1m]) by (baz), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
min without (
|
||
|
|
downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`count by (baz) (
|
||
|
|
min by (baz) (
|
||
|
|
downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz), shard=<nil>>
|
||
|
|
++ downstream<min_over_time({app="foo"} | unwrap bar [1m]) by (baz), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (rate({app="foo"}[3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`count by (baz) (bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`count by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - max
|
||
|
|
{
|
||
|
|
`max(bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`max(
|
||
|
|
sum without (
|
||
|
|
downstream<max(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(count_over_time({app="foo"}[3m]))`,
|
||
|
|
`max(
|
||
|
|
sum without (
|
||
|
|
downstream<max(count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`max(
|
||
|
|
sum without (
|
||
|
|
downstream<max(sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(sum_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`max(
|
||
|
|
max without (
|
||
|
|
downstream<max(max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(max_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`max(
|
||
|
|
max by (baz) (
|
||
|
|
downstream<max(max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max(max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max(max_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`max(
|
||
|
|
min without (
|
||
|
|
downstream<max(min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(min_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`max(
|
||
|
|
min by (baz) (
|
||
|
|
downstream<max(min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max(min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max(min_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(rate({app="foo"}[3m]))`,
|
||
|
|
`max(
|
||
|
|
(sum without (
|
||
|
|
downstream<max(count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`max(
|
||
|
|
(sum without (
|
||
|
|
downstream<max(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - max by
|
||
|
|
{
|
||
|
|
`max by (baz) (bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<max by (baz) (bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (count_over_time({app="foo"}[3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<max by (baz) (count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<max by (baz) (sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (sum_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
max without (
|
||
|
|
downstream<max by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (max_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`max by (baz) (
|
||
|
|
max by (baz) (
|
||
|
|
downstream<max by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (max_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
min without (
|
||
|
|
downstream<max by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (min_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`max by (baz) (
|
||
|
|
min by (baz) (
|
||
|
|
downstream<max by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (min_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (rate({app="foo"}[3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<max by (baz) (count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max by (baz) (bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`max by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<max by (baz) (bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max by (baz) (bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - min
|
||
|
|
{
|
||
|
|
`min(bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`min(
|
||
|
|
sum without (
|
||
|
|
downstream<min(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(count_over_time({app="foo"}[3m]))`,
|
||
|
|
`min(
|
||
|
|
sum without (
|
||
|
|
downstream<min(count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`min(
|
||
|
|
sum without (
|
||
|
|
downstream<min(sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(sum_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`min(
|
||
|
|
max without (
|
||
|
|
downstream<min(max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(max_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`min(
|
||
|
|
max by (baz) (
|
||
|
|
downstream<min(max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min(max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min(max_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`min(
|
||
|
|
min without (
|
||
|
|
downstream<min(min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(min_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`min(
|
||
|
|
min by (baz) (
|
||
|
|
downstream<min(min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min(min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min(min_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(rate({app="foo"}[3m]))`,
|
||
|
|
`min(
|
||
|
|
(sum without (
|
||
|
|
downstream<min(count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`min(
|
||
|
|
(sum without (
|
||
|
|
downstream<min(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Vector aggregator - min by
|
||
|
|
{
|
||
|
|
`min by (baz) (bytes_over_time({app="foo"}[3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<min by (baz) (bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (count_over_time({app="foo"}[3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<min by (baz) (count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (sum_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
sum without (
|
||
|
|
downstream<min by (baz) (sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (sum_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (max_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
max without (
|
||
|
|
downstream<min by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (max_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (max_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`min by (baz) (
|
||
|
|
max by (baz) (
|
||
|
|
downstream<min by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (max_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (max_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (min_over_time({app="foo"} | unwrap bar [3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
min without (
|
||
|
|
downstream<min by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (min_over_time({app="foo"} | unwrap bar [1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (min_over_time({app="foo"} | unwrap bar [3m]) by (baz))`,
|
||
|
|
`min by (baz) (
|
||
|
|
min by (baz) (
|
||
|
|
downstream<min by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 2m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (min_over_time({app="foo"} | unwrap bar [1m] offset 1m0s) by (baz)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (min_over_time({app="foo"} | unwrap bar [1m]) by (baz)), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (rate({app="foo"}[3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<min by (baz) (count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min by (baz) (bytes_rate({app="foo"}[3m]))`,
|
||
|
|
`min by (baz) (
|
||
|
|
(sum without (
|
||
|
|
downstream<min by (baz) (bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<min by (baz) (bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Binary operations
|
||
|
|
{
|
||
|
|
`bytes_over_time({app="foo"}[3m]) + count_over_time({app="foo"}[5m])`,
|
||
|
|
`(sum without (
|
||
|
|
downstream<bytes_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<bytes_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) +
|
||
|
|
sum without (
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 4m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 3m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
))
|
||
|
|
`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(count_over_time({app="foo"}[3m]) * count(sum_over_time({app="foo"} | unwrap bar [5m])))`,
|
||
|
|
`sum(
|
||
|
|
(sum without(
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
) *
|
||
|
|
count (
|
||
|
|
sum without(
|
||
|
|
downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 4m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 3m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<sum_over_time({app="foo"} | unwrap bar [1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
))
|
||
|
|
)
|
||
|
|
`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum by (app) (bytes_rate({app="foo"}[3m])) / sum by (app) (rate({app="foo"}[3m]))`,
|
||
|
|
`(
|
||
|
|
sum by (app) (
|
||
|
|
(sum without (
|
||
|
|
downstream<sum by (app) (bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (app) (bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (app) (bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)
|
||
|
|
/
|
||
|
|
sum by (app) (
|
||
|
|
(sum without (
|
||
|
|
downstream<sum by (app) (count_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (app) (count_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<sum by (app) (count_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
) / 180)
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Multi vector aggregator layer queries
|
||
|
|
{
|
||
|
|
`sum(max(bytes_over_time({app="foo"}[3m])))`,
|
||
|
|
`sum(
|
||
|
|
max(
|
||
|
|
sum without(
|
||
|
|
downstream<max(bytes_over_time({app="foo"}[1m] offset 2m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(bytes_over_time({app="foo"}[1m] offset 1m0s)), shard=<nil>>
|
||
|
|
++ downstream<max(bytes_over_time({app="foo"}[1m])), shard=<nil>>
|
||
|
|
)
|
||
|
|
)
|
||
|
|
)
|
||
|
|
`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// Non-splittable vector aggregators - should go deeper in the AST
|
||
|
|
{
|
||
|
|
`topk(2, count_over_time({app="foo"}[3m]))`,
|
||
|
|
`topk(2,
|
||
|
|
sum without(
|
||
|
|
downstream<count_over_time({app="foo"}[1m] offset 2m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m] offset 1m0s), shard=<nil>>
|
||
|
|
++ downstream<count_over_time({app="foo"}[1m]), shard=<nil>>
|
||
|
|
)
|
||
|
|
)`,
|
||
|
|
},
|
||
|
|
} {
|
||
|
|
tc := tc
|
||
|
|
t.Run(tc.expr, func(t *testing.T) {
|
||
|
|
t.Parallel()
|
||
|
|
noop, mappedExpr, err := rvm.Parse(tc.expr)
|
||
|
|
require.NoError(t, err)
|
||
|
|
require.False(t, noop)
|
||
|
|
require.Equal(t, removeWhiteSpace(tc.expected), removeWhiteSpace(mappedExpr.String()))
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func Test_SplitRangeVectorMapping_Noop(t *testing.T) {
|
||
|
|
rvm, err := NewRangeMapper(time.Minute)
|
||
|
|
require.NoError(t, err)
|
||
|
|
|
||
|
|
for _, tc := range []struct {
|
||
|
|
expr string
|
||
|
|
expected string
|
||
|
|
}{
|
||
|
|
// Non-splittable range vector aggregators
|
||
|
|
{
|
||
|
|
`quantile_over_time(0.95, {app="foo"} | unwrap bar[3m])`,
|
||
|
|
`quantile_over_time(0.95, {app="foo"} | unwrap bar[3m])`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(avg_over_time({app="foo"} | unwrap bar[3m]))`,
|
||
|
|
`sum(avg_over_time({app="foo"} | unwrap bar[3m]))`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// should be noop if range interval is slower or equal to split interval (1m)
|
||
|
|
{
|
||
|
|
`bytes_over_time({app="foo"}[1m])`,
|
||
|
|
`bytes_over_time({app="foo"}[1m])`,
|
||
|
|
},
|
||
|
|
|
||
|
|
// should be noop if inner range aggregation includes a stage for label extraction such as `| json` or `| logfmt`
|
||
|
|
// because otherwise the downstream queries would result in too many series
|
||
|
|
{
|
||
|
|
`sum(min_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`sum(min_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(max_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`sum(max_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`sum(sum_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`sum(sum_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(min_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`min(min_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(max_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`min(max_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`min(sum_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`min(sum_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(min_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`max(min_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(max_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`max(max_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max(sum_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
`max(sum_over_time({app="foo"} | logfmt | unwrap bar [3m]))`,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
`max_over_time({app="foo"} | json | unwrap bar [3m])`,
|
||
|
|
`max_over_time({app="foo"} | json | unwrap bar [3m])`,
|
||
|
|
},
|
||
|
|
} {
|
||
|
|
tc := tc
|
||
|
|
t.Run(tc.expr, func(t *testing.T) {
|
||
|
|
t.Parallel()
|
||
|
|
noop, mappedExpr, err := rvm.Parse(tc.expr)
|
||
|
|
require.NoError(t, err)
|
||
|
|
require.True(t, noop)
|
||
|
|
require.Equal(t, removeWhiteSpace(tc.expected), removeWhiteSpace(mappedExpr.String()))
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func Test_FailQuery(t *testing.T) {
|
||
|
|
rvm, err := NewRangeMapper(2 * time.Minute)
|
||
|
|
require.NoError(t, err)
|
||
|
|
_, _, err = rvm.Parse(`{app="foo"} |= "err"`)
|
||
|
|
require.Error(t, err)
|
||
|
|
}
|