Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

Description

Adds a new column that reverses the contents of a string or boxarint.

How does it work in the search window?

Select Create column in the search window toolbar, then select the Reverse operation. You need to specify one argument:

Argument

Data type

String mandatory

string

To reverse a boxarint:

Argument

Data type

Boxarint mandatory

string or boxar(int1)

The data type of the values in the new column is string.

Example 2 uses a string that represents a byte array—a regular string is not valid for this operation.

You can also run this operation with a boxarint column. 

Example 1

In the siem.logtrust.web.activity table, you want to reverse the strings of the city column.

The argument needed to create the new column is:

  • String to be converted - city column

Click Create column and you will see the following result:

Example 2

To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId column.

Create a reverse boxarint from the previously-created boxar column.

Once completed this is the result:

How does it work in LINQ?

Use the operator select... as...  and add the operation syntax to create the new column. This is the syntax for the Reverse operation:

  • reverse(string)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity
  select reverse(city) as reverse

Use the operator select... as...  and add the operation syntax to create the new column. This is the syntax to reverse a boxarint:

  • reverse(string)
    or

  • reverse(boxar(int1)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity
  select from16(correlationId) as boxar,
    reverse(boxar) as Reversed
  • No labels