| Table of Contents | ||||
|---|---|---|---|---|
|
...
How does it work in the search window?
Select Create column in the search window toolbar, then select the Reverse operation. You need to specify one argument:
Argument | Data type |
|---|---|
String mandatory | string |
To reverse a boxarint:
Argument | Data type |
|---|---|
Boxarint mandatory | string or boxar(int1) |
The data type of the values in the new column is string.
| Info |
|---|
Example 2 uses a string that represents a byte array—a regular string is not valid for this operation. You can also run this operation with a boxarint column. |
Example 1
In the siem.logtrust.web.activity table, you want to reverse the strings of the city column.
The argument needed to create the new column is:
...
Click Create column and you will see the following result:
...
Example 2
To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId column.
...
Create a reverse boxarint from the previously-created boxar column.
...
Once completed this is the result:
...
How does it work in LINQ?
Use the operator select... as... and add the operation syntax to create the new column. This is the syntax for the Reverse operation:
reverse(string)
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:
| Code Block |
|---|
from siem.logtrust.web.activity select reverse(city) as reverse |
...
reverse(string)
orreverse(boxar(int1)
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:
| Code Block |
|---|
from siem.logtrust.web.activity select from16(correlationId) as boxar, reverse(boxar) as Reversed |