Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
maxLevel2
typeflat

...

Extract the subdomain from the hostnames in a given string field. A subdomain is a domain that is a part of a larger domain. For example, in www.devo.com, the subdomain is www.

Note

Due to the inherent structure of certain hostnames, this operation will return empty values in cases such as "twitter-badges.s3.amazonaws.com". For those cases, it would be more appropriate to use the Hostname root prefix (rootprefix) operation.

How does it work in the search window?

Select Create column field in the search window toolbar, then select the Hostname subdomains operation. You need to specify one argument:

Argument

Data type

Hostname mandatory

string

The data type of the values in the new column field is string.

...

Example

...

Rw ui textbox macro
typeinfo

The examples in this article use values in a data table generated from the following CSV file.

View file
nameSample.data.csv

If you want to try the example for yourself, download the file and upload it to your domain by clicking Data upload in the navigation

...

panel. Name the new table my.upload.sample.data and select Current date as Date parsing type. Learn more about uploading data in Uploading log files.

After receiving the confirmation message, you can access the table from the Finder, selecting my → upload → sample → data. When you upload data from a file, all the information is included in a single column called message. To split the values into different columns, you can use the Split operation. Click Toggle Query Editor in the search window toolbar and paste the following LINQ query to save time:

from my.upload.sample.data
select split(message, ";", 15) as Hostnames

...

In the my.upload.sample.data table, we want to get the subdomains of the hostnames in our Hostnames columnfirld. To do it, we will create a new column field using the Hostname subdomains operation.

The arguments needed to create the new column field are:

  • Hostname Hostnames columnfield

...

Click Create columnfield and you will see the following result:

...

Use the operator select... as...  and add the operation syntax to create the new column. This is the syntax for the Hostname subdomains operation:

  • subdomain(string)

Example

You can copy the following LINQ script and try the above example on the my.upload.sample.data table. As said above, keep  Keep in mind that you must download and upload this lookup file to CSV file above to your Devo domain.

Code Block
from my.upload.sample.data
select split(message, ";", 15) as Hostnames
select subdomain(Hostnames) as subdomains