Save Operator
Use the save operator to insert or update rows in a lookup table.
-
If a result row has a primary key that matches an existing row, the row is updated.
-
If the primary key does not exist, a new row is added.
This operation combines both merge and append updates.
Example
Save user details from login application logs to the userinfo lookup table:
source="login_application" | save userinfo
