• v7.1.0
    • v7.11.0 (latest)
    • v7.10.0
    • v7.9.0
    • v7.8.0
    • v7.7.0
    • v7.6.0
    • v7.5.0
    • v7.3.0
    • v7.2.0
    • v7.1.1
    • v7.1.0
    • v7.0.8
  • Services & Support
  • Devo.com
  • Contact
    • Contact Us
    • Request a Demo
    • Partner Inquiry
  • Log In
    • USA Devo
    • EU Devo
PREVIOUS
Replace first (replace)
NEXT
Shannon entropy (shannonentropy)

Searching data / Building a query / Operations reference / String group / Reverse (reverse)

Download as PDF

Reverse (reverse)

Description

Adds a new column that reverses the contents of a string or boxarint.

How does it work in the search window?

Select Create column in the search window toolbar, then select the Reverse operation. You need to specify one argument:

ArgumentData type
String (mandatory)
string

To reverse a boxarint:

ArgumentData type
Boxarint (mandatory)string or boxar(int1)

The data type of the values in the new column is string.

Example 2 uses a string that represents a byte array—a regular string is not valid for this operation.

You can also run this operation with a boxarint column. 

Example 1

In the siem.logtrust.web.activity table, you want to reverse the strings of the city column.

The argument needed to create the new column is:

  • String to be converted - city column

Click Create column and you will see the following result:


Example 2

To reverse the values of a boxarint you must create a byte array from a valid hexadecimal (base16) string, in this example using the correlationId column.

Create a reverse boxarint from the previously-created boxar column.

Once completed this is the result:

How does it work in LINQ?

Use the operator select... as...  and add the operation syntax to create the new column. This is the syntax for the Reverse operation:

  • reverse(string)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity
  select reverse(city) as reverse

Use the operator select... as...  and add the operation syntax to create the new column. This is the syntax to reverse a boxarint:

  • reverse(string)
    or
  • reverse(boxar(int1)

Example

You can copy the following LINQ script and try the above example on the siem.logtrust.web.activity table:

from siem.logtrust.web.activity
  select from16(correlationId) as boxar,
    reverse(boxar) as Reversed
Download as PDF

PREVIOUS
Replace first (replace)
NEXT
Shannon entropy (shannonentropy)

Export

See what Devo can do for you. Request a demo!
Discover what's new (Release notes)
  • v7.1.0
    • v7.11.0 (latest)
    • v7.10.0
    • v7.9.0
    • v7.8.0
    • v7.7.0
    • v7.6.0
    • v7.5.0
    • v7.3.0
    • v7.2.0
    • v7.1.1
    • v7.1.0
    • v7.0.8
  • Services & Support
  • Devo.com
  • Contact
    • Contact Us
    • Request a Demo
    • Partner Inquiry
  • Log In
    • USA Devo
    • EU Devo
  • +1 888 6830910 (USA)
  • +34 900 838 880 (Spain)
Copyright © 2019 Legal Terms Privacy Policy Cookies Policy

Powered by Confluence and Scroll Viewport