Reverse (reverse)
- Juan Tomás Alonso Nieto (Deactivated)
- Former user (Deleted)
- Former user (Deleted)
Description
Adds a new field that reverses the contents of a string or boxarint.
How does it work in the search window?
Select Create field in the search window toolbar, then select the Reverse operation. You need to specify one argument:
Argument | Data type |
|---|---|
String mandatory | string |
To reverse a boxarint:
Argument | Data type |
|---|---|
Boxarint mandatory | string or boxar(int1) |
The data type of the values in the new field is string.
Example 2 uses a string that represents a byte array—a regular string is not valid for this operation.
You can also run this operation with a boxarint field.
Example 1
In the siem.logtrust.web.activity table, you want to reverse the strings of the city field.
The argument needed to create the new field is:
String to be converted - city field
Click Create field.
Example 2
To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId field.
Create a reverse boxarint from the previously-created boxar field.
Once completed this is the result:
How does it work in LINQ?
Use the operator select... as... and add the operation syntax to create the new field. This is the syntax for the Reverse operation:
reverse(string)
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:
from siem.logtrust.web.activity
select reverse(city) as reverseUse the operator select... as... and add the operation syntax to create the new field. This is the syntax to reverse a boxarint:
reverse(string)
orreverse(boxar(int1)
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:
from siem.logtrust.web.activity
select from16(correlationId) as boxar,
reverse(boxar) as Reversed