Skip to main content
An extend table is a small key-to-record lookup table kept in MoleSignal. A pipeline transform looks a key up in it to enrich events with reference data: map a service to the team that owns it, an account ID to a plan tier, or a region code to a region name, without calling an external store on the hot path.

The table list

Open Extend tables. The head counts the tables and their records. Each table shows its lookup key and fields, the number of records, where it is used, the last update, and its state, Healthy or Empty. Filter by state and by usage (In use or Unused), and search by name.

Create a table

Select New extend table. The wizard has two steps.
1

Define schema

Enter the Table name and a Description. Choose the Lookup key, the field that identifies a record, such as customer_id, service, or region_code. Add Value fields with a Field name, a Type (String, Number, Boolean, or Object), whether it is Required, and a description. Leave the value fields empty to store flexible JSON records instead. A table holds up to 100 value fields; field names use letters, digits, ., -, and _.
2

Add or import data

Choose Start empty to add records later, or Paste JSON to load them now: a JSON array of records that each carry the lookup key, or an object that maps each key to its record.
Select Create extend table.

Records

Open a table. The Data records tab lists the records; search them by lookup key or by a field value.

Schema, usage, and settings

Look up a key in a pipeline

Inside a VRL transform, call lookup(table, key) and read a field off the returned record:
Lookups run in memory and add no query or storage cost to a pipeline run. The table loads on startup and stays current as records are added, changed, or deleted. Extend tables belong to the workspace and every pipeline of it can use them.

Extend table API

Permissions

functions.read lists tables and their usage. Creating a table requires functions.create, changing records and fields requires functions.edit, and deleting a table requires functions.delete.

Pipelines

Build the transform chain that calls the extend tables.
Last modified on October 26, 2026