Kaspersky Unified Monitoring and Analysis Platform

Supported ClickHouse functions

December 4, 2023

ID 235093

The following ClickHouse functions are supported in KUMA:

  • Arithmetic functions.
  • Arrays—all functions except:
    • has
    • range
    • functions in which higher-order functions must be used (lambda expressions (->))
  • Comparison functions: all operators except == and less.
  • Logical functions: "not" function only.
  • Type conversion functions.
  • Date/time functions: all except date_add and date_sub.
  • String functions.
  • String search functions—all functions except:
    • position
    • multiSearchAllPositions, multiSearchAllPositionsUTF8, multiSearchFirstPosition, multiSearchFirstIndex, multiSearchAny
    • like and ilike
  • Conditional functions: simple if operator only (ternary if and miltif operators are not supported).
  • Mathematical functions.
  • Rounding functions.
  • Functions for splitting and merging strings and arrays.
  • Bit functions.
  • Functions for working with UUIDs.
  • Functions for working with URLs.
  • Functions for working with IP addresses.
  • Functions for working with Nullable arguments.
  • Functions for working with geographic coordinates.

In KUMA 2.1.3, errors with the operation of the DISTINCT operator have been fixed. In this case, you must use the following notation: SELECT DISTINCT SourceAddress as Addresses FROM <rest of the query>.

In KUMA 2.1.1, the SELECT DISTINCT SourceAddress / SELECT DISTINCT(SourceAddress) / SELECT DISTINCT ON (SourceAddress) operators work incorrectly.

Search and replace functions in strings, and functions from other sections are not supported.

For more details on SQL, refer to the ClickHouse documentation.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.