Skip to main content

V1 - Lookup Functions - entitylookup

entitylookup​

  • {col1, col2} = entitylookup(field, entityName)

The entity information lists can be found in https://demo.cloud.fluencysecurity.com/user/EntityInfo.

If the field value matches the entityinfo lookup, return the specified columns. Empty table assignment is not supported for this function.

Example:

let EventID = f("@fields.EventID") 
aggregate count() by EventID
let {Description}= entitylookup(EventID, "AD_EventID")

In this example, "AD_EventID" is the entity name and "EventID" is the field.