/
Reverse (reverse)

Reverse (reverse)

Description

Adds a new field that reverses the contents of a string or boxarint.

How does it work in the search window?

Select Create field in the search window toolbar, then select the Reverse operation. You need to specify one argument:

Argument

Data type

Argument

Data type

String mandatory

string

To reverse a boxarint:

Argument

Data type

Argument

Data type

Boxarint mandatory

string or boxar(int1)

The data type of the values in the new field is string.

Example 2 uses a string that represents a byte array—a regular string is not valid for this operation.

You can also run this operation with a boxarint field. 

Example 1

In the siem.logtrust.web.activity table, you want to reverse the strings of the city field.

The argument needed to create the new field is:

  • String to be converted - city field

Click Create field.

Example 2

To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId field.

Create a reverse boxarint from the previously-created boxar field.

Once completed this is the result:

How does it work in LINQ?

Use the operator select... as...  and add the operation syntax to create the new field. This is the syntax for the Reverse operation:

  • reverse(string)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity select reverse(city) as reverse

Use the operator select... as...  and add the operation syntax to create the new field. This is the syntax to reverse a boxarint:

  • reverse(string)
    or

  • reverse(boxar(int1)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity   select from16(correlationId) as boxar,     reverse(boxar) as Reversed

Related content

Reverse (reverse)
Reverse (reverse)
More like this
To base16, b16, hex (to16)
To base16, b16, hex (to16)
More like this
Replace first (replace)
Replace first (replace)
More like this
To Z85, base85 (toz85)
To Z85, base85 (toz85)
More like this
To IPv4 (ip4)
To IPv4 (ip4)
More like this
Subtraction, minus / Additive inverse (sub, -)
Subtraction, minus / Additive inverse (sub, -)
More like this