| Table of Contents | ||||
|---|---|---|---|---|
|
...
Select Create field in the search window toolbar, then select the Keys operation. You need to specify at one argument:
Argument | Data type | ||
|---|---|---|---|
Array map mandatory | Map
|
...
This is the syntax for the Keys operation.
Use:
| Code Block |
|---|
'sort([5,2,3,4,1]) === [1,2,3,4,5] ', 'sort(["d","a","c","b"]) === ["a","b","c","d"]', 'sort([5,2,3,4,1], true keys({1:null,2:"b",3:"c"}) === [{1,2,3,4,5] ', 'sort(["d","a","c","b"], true ) === ["a","b",} keys({1:null,2:"b",3:"c",null:"d"]', 'sort([5,2,3,4,1], false}) === [5,4,3,2,1] ', 'sort(["d","a","c","b"], false) === ["d","c","b","a"]', 'sort([5{1,2,3,4,1], null ) === null null} |
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table. Keep in mind that you must download and upload the file provided before to your Devo domain.
...