Docs
Open console →

series_greater_equals

This page explains how to use the series_greater_equals function in APL.

The series_greater_equals function compares two numeric arrays element by element and returns a new array of Boolean values. Each element in the result is true if the corresponding element in the first array is greater than or equal to the corresponding element in the second array, and false otherwise.

You use this function when you want to perform threshold comparisons across two series of values, such as checking performance metrics against baselines, comparing observed values to expected ranges, or evaluating time-aligned logs and traces.

Usage

Syntax

series_greater_equals(array1, array2)

Parameters

ParameterTypeDescription
array1dynamic (array of numeric values)The first input array.
array2dynamic (array of numeric values)The second input array. Must be the same length as array1.

Returns

A dynamic array of Boolean values where each element is true if array1[i] >= array2[i], and false otherwise.

Use case examples

In log analysis, you can compare observed request durations against a threshold series to identify requests that are slower than expected.

Query

['sample-http-logs']
| summarize durations = make_list(req_duration_ms) by id
| extend threshold = dynamic([100,100,100])
| extend exceeds = series_greater_equals(durations, threshold)

Run in Playground

Output

iddurationsthresholdexceeds
u123[120,80,150][100,100,100][true,false,true]

This query groups request durations by user ID, builds a list of durations, and checks each against the threshold series of 100 ms.

In OpenTelemetry traces, you can compare span durations from one service with expected baselines to detect performance regressions.

Query

['otel-demo-traces']
| where ['service.name'] == 'checkout'
| summarize durations = make_list(duration) by trace_id
| extend baseline = dynamic([100ms,200ms,300ms])
| extend slower = series_greater_equals(durations, baseline)

Run in Playground

Output

trace_iddurationsbaselineslower
t001[120ms,180ms,400ms][100ms,200ms,300ms][true,false,true]

This query checks if spans in the checkout service are slower than the defined baseline series.

In security logs, you can compare the frequency of failed status codes against a threshold to detect suspicious behavior.

Query

['sample-http-logs']
| where status == '500'
| summarize fails = make_list(req_duration_ms) by ['geo.country']
| extend threshold = dynamic([200,200,200])
| extend suspicious = series_greater_equals(fails, threshold)

Run in Playground

Output

geo.countryfailsthresholdsuspicious
US[210,190,300][200,200,200][true,false,true]

This query aggregates failed requests by country, builds a series of durations, and compares them against a 200 ms threshold to highlight suspiciously slow failures.

  • series_greater: Compares two arrays and returns true where the first array element is greater than the second.
  • series_less: Compares two arrays and returns true where the first array element is less than the second.
  • series_less_equals: Compares two arrays and returns true where the first array element is less than or equal to the second.
  • series_not_equals: Compares two arrays and returns true where elements aren’t equal.

Other query languages