Data types in Devo
When raw data arrives to Devo and is grouped into tables, each row represents an event and each column represents a different type of data. Devo automatically asigns one of its recognized data types to each column. To check a column data type in the query window, select the Search column layout option in the toolbar.
When performing query operations such as applying filters or creating new columns, you must take into account the data types of the columns you add as arguments, since each function requires specific types of data.
For example, say you want to get the regions corresponding to a set of IP addresses. You must create a new column using the Geolocated Region Name operation, and add an Ip type column as an argument. The created column will return the corresponding regions as sentences of characters (String data type).
The following table describes the available data types in Devo:
|str||The string data type represents a sequence of characters.||"Hello user 25", "firstname.lastname@example.org"...|
|int||The integer data type represents mathematical integers, that is, numbers that can be zero, positive or negative values but no decimal values.||21, 0, -4...|
|float||The float data type represents a fractional (floating-point) number.||3.25907, 5.542...|
|boxar(int1)||The boxar(int1) data type represents a byte array in the form of an hexadecimal string.||41, 616263...|
|boolean||The boolean data type represents the values true and false.||true, false|
|duration||The duration data type represents a duration that must be an integer number followed by a suffix: d (for days), h (for hours), m (for minutes)...||1d, 20m...|
|timestamp||The timestamp data type represents a date in 'yyyy-MM-dd HH:mm:ss.SSS' format.||2019-02-06 08:58:51.230|
|geocoord||The geocoord data type represents a valid geocoord, which may be either a set of sexagesimal coordinates based on latitude and longitude values (latlon), or a hash representation of coordinates (geohash).||40°24'46.3"N 3°41'43.8"W, ezjmguvj...|
|ip||The ip data type represents an IPv4 in dot-decimal notation.||184.108.40.206|
|net4||The net4 data type represents an IPv4 network in x.x.x.x/s format.||0.0.0.0/8|
|regexp||The regexp data type represents a regular expression.||[^\w]|
|template||The template data type represents a substitution string, which is used in some Regexp operations. You can also use it as a capturing group entering \ and the corresponding value(s) (for example: \1\2).||***, \1|
|dc||The distinct count data type represents a estimated count of distinct elements in a data stream. You can get this data type using the Hyperloglog Count Estimation aggregation operation.||2.00000005960464|
The image data type represents a Base64 encoded image.
|mac||The mac data type represents a valid MAC address.||00:0a:95:9d:68:16|