Reverse (reverse)
- Juan Tomás Alonso Nieto (Deactivated)
Analytics
Description
Adds a new column that reverses the contents of a string or boxarint.
How does it work in the search window?
Select Create column in the search window toolbar, then select the Reverse operation. You need to specify one argument:
Argument | Data type |
|---|---|
String mandatory | string |
To reverse a boxarint:
Argument | Data type |
|---|---|
Boxarint mandatory | string or boxar(int1) |
The data type of the values in the new column is string.
Example 2 uses a string that represents a byte array—a regular string is not valid for this operation.
You can also run this operation with a boxarint column.
Example 1
In the siem.logtrust.web.activity table, you want to reverse the strings of the city column.
The argument needed to create the new column is:
String to be converted - city column
Click Create column and you will see the following result:
Example 2
To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId column.
Create a reverse boxarint from the previously-created boxar column.
Once completed this is the result:
How does it work in LINQ?
Use the operator select... as... and add the operation syntax to create the new column. This is the syntax for the Reverse operation:
reverse(string)
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:
from siem.logtrust.web.activity
select reverse(city) as reverseUse the operator select... as... and add the operation syntax to create the new column. This is the syntax to reverse a boxarint:
reverse(string)
orreverse(boxar(int1)
Example
You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:
from siem.logtrust.web.activity
select from16(correlationId) as boxar,
reverse(boxar) as Reversed