Tags in IRONdb are represented as
category:value pairs that are separated by
the colon (
Category strings may contain upper- and lowercase letters (
0-9), and the following characters:
Tag values allow all of the above characters plus colon (
:) and equals (
Any tag characters that do not fall into this set can still be ingested if they are base64 encoded and passed in a special wrapper format. More on this below.
Tags are ingested into IRONdb by placing the tags after the metric name with a
tag separator character sequence:
|ST and enclosed in square brackets
Commas separate each tag.
foo|ST[a:b] bar|ST[c:d] quux|ST[region:us-east-1,app:myapp]
Tags (including category and value) are limited to 256 characters for each tag.
Tags that contain characters outside of the acceptable set can be ingested by base64 encoding. To store a metric like:
(), and greater/less
<> are outside of the character set you would encode
the category and value separately as base64 and enclose them in
b"". For example:
It is always safe to encode all incoming tags in this way, the server will decide if the name is safely representable without encoding and store the metric name decoded if it can.
Note that this encoding also applies to tag searches if the search uses an unsupported character See Searching Tags
Tag queries can be used to find or perform deletion of metrics using a boolean tag search.
A query follows this eBNF syntax:
query-param = all-of | any-of | not all-of = "and(" query-tag-list ")" any-of = "or(" query-tag-list ")" not = "not(" query-tag-el ")" query-tag-list = query-tag-el | query-tag-el "," query-tag-list query-tag-el = all-of | any-of | not | tag-category:tag-value | /cat regex/:/val regex/ | glob
not clause may only contain a single expression, whereas
or may each contain a list of expressions.
Each expression may be a literal
key:value to match, a regular expression, or a glob match syntax.
Regular expressions follow the PCRE2 syntax and are of the form:
/category regex/:/value regex/
Note that you can apply regular expressions independently to category or value or both:
category:/value regex/ /category regex/:value
Glob syntax supports the wildcard “
*” and can be used as a completer:
categ*:value category:val* *:*
The last will match every tag and pull everything for the account.
There are several special tags:
Which do not explicitly appear in metric names but can be used to find metrics
anyway. For example, you could query activity periods for all metrics within a
__check_uuid even if none of those metrics were submitted with tags.
__activity tag uses a special syntax to select only metrics that have data
(also know as activity) in a specific time range. The value of the
tag in the search expression should take the format of
where each is represented in seconds since UNIX epoch. An example to find metrics
query_count with data between 1569869100 to 1569870000 would be:
If your query uses an unsupported tag character you must enclose the query in base64 notation:
To pass through the unsupported characters. Note that the asterisk (
glob syntax is allowed unencoded for searches, but not for tag categories or
If using regular expression patterns, the
/ / should not be encoded. To
perform a regex match on
(foo|bar), you would use the form
See the examples below for more color.
You have ingested the following metrics:
foo|ST[region:us-east-1,app:myapp] bar|ST[region:us-east-2,app:myapp] baz|ST[region:us-west-1,app:myapp] quux|ST[region:us-west-2,app:yourapp]
To find all of the metrics under
app:myapp your query would be:
To find all of the metrics in
us-east regardless of sub-region you would do:
and(region:us-east-*) in glob syntax or:
and(region:/us-east-.*/) in regex syntax.
quux you could either do: