aggregating-event-datasets

What problem does it solve?

This skill enables analysts to quickly derive meaningful summaries from large volumes of event logs by applying OPAL's statsby aggregation.

Core Features & Use Cases

• Derived columns: Use make_col to extract dimensions (e.g., namespace, pod) for grouping.
• Efficient aggregation: Compute counts, sums, averages, percentiles, and tops per group with a single pass over the time window.
• Use Case: Identify the top namespaces by error count across the last 24 hours, or produce a per-service average latency by group.

Quick Start

Start by discovering a dataset, create derived grouping columns with make_col, then apply statsby to produce one row per group across the chosen time range.