Reverse (reverse)

[ 1 Description ] [ 2 How does it work in the search window? ] [ 3 How does it work in LINQ? ]

Description

Adds a new field that reverses the contents of a string or boxarint.

How does it work in the search window?

Select Create field in the search window toolbar, then select the Reverse operation. You need to specify one argument:

Argument	Data type

Argument	Data type
String ^mandatory	string

To reverse a boxarint:

Argument	Data type

Argument	Data type
Boxarint ^mandatory	string or boxar(int1)

The data type of the values in the new field is string.

Example 2 uses a string that represents a byte array—a regular string is not valid for this operation.

You can also run this operation with a boxarint field.

Example 1

In the siem.logtrust.web.activity table, you want to reverse the strings of the city field.

The argument needed to create the new field is:

String to be converted - city field

Click Create field.

Example 2

To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId field.

Create a reverse boxarint from the previously-created boxar field.

Once completed this is the result:

How does it work in LINQ?

Use the operator select... as... and add the operation syntax to create the new field. This is the syntax for the Reverse operation:

reverse(string)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity
  select reverse(city) as reverse

Use the operator select... as... and add the operation syntax to create the new field. This is the syntax to reverse a boxarint:

reverse(string)
or
reverse(boxar(int1)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity
  select from16(correlationId) as boxar,
    reverse(boxar) as Reversed