Table of Contents | ||||
---|---|---|---|---|
|
Description
You can apply this operation either as a Filter or Create field operation:
Filter | Filters those events where a value is less than or equal to either another field of the same data type or a specified value. |
---|---|
Create field | Creates a Boolean column that shows true when a value is less than or equal to either another field of the same data type or a specified value. |
How does it work in the search window?
Select Filter / Create field in the search window toolbar, then select the Less or equal operation. You need to specify two arguments:
Argument | Data type |
---|---|
Value mandatory | Any |
is less than or equal to mandatory | The same as the Value data type |
If you use the Create field operation, the data type of the values in the new field is boolean (true or false).
Note |
---|
Working with strings Be aware that in case you use strings, the values will be compared according to the ASCII code, in which each character has an associated value. If you want to know more about the ASCII code, click the following link. |
Example
In the demosiem.logtrust.ecommerceweb.dataactivity
table, we want to get only the events with status codes that are response times less than or equal to 400to 500. To do it, we will apply a Filter using the Less or equal operation.
The arguments needed for the filter are:
Value - statusCoderesponseTime field
is less than or equal to - Click the pencil icon and enter 400500
...
Click Filter data and you will see the following result:
...
Click Create field and follow the same steps to add a new Boolean field that shows true when the values in the statusCode the responseTime field are less than or equal to 400500.
How does it work in LINQ?
Use the operator where
... to apply the Filter operation and select
... as
... to apply the Create column operation. These are the valid formats of the Less or equal operation:
value1 <= value2
le(value1, value2)
Examples
You can copy the following LINQ scripts and try the above example on the demo.ecommerce.data
table:
Code Block |
---|
from demo.ecommerce.data where statusCode <= 400 |
...
Code Block |
---|
from demo.ecommerce.data where le(statusCode, 400) |
And this is the same example using the Create column operation:
Code Block |
---|
from demo.ecommerce.data select statusCode <= 400 as code_le_400 |
...