Equal (eq, =)
You can apply this operation either as a Filter or Create column operation:
Compares two values of the same type and returns only the events where the values are exactly the same.
Compares two values of the same type and creates a Boolean column that shows true when both values are exactly the same.
This operation is case sensitive. Use the Equal - case insensitive (eqic) operation if you need to apply this operation ignoring case.
How does it work in the search window?
Select Filter / Create column in the search window toolbar, then select the Equal operation. You need to specify two arguments:
|is equal to (mandatory)||The same as the Value data type|
If you use the Create column operation, the data type of the values in the new column is boolean (true or false).
demo.ecommerce.data table, we want to detect events with status code 200. We will use the Create column operation to add a new Boolean column that shows true when our events have status code 200.
We will enter status_code_200 as the column name. The arguments needed are:
- Value - statusCode column
- is equal to - Click the pencil icon and enter 200
Click Create column and you will see the following result:
Click Filter and follow the same steps to filter events with status code 200.
How does it work in LINQ?
Use the operator
where... to apply the Filter operation and
as... to apply the Create column operation. These are the valid formats of the Equal operation:
field1 = field2
You can copy the following LINQ scripts and try the above example on the
from demo.ecommerce.data where statusCode = 200
from demo.ecommerce.data where eq(statusCode, 200)
And this is the same example using the Create column operation:
from demo.ecommerce.data select statusCode = 200 as status_code_200
from demo.ecommerce.data select eq(statusCode, 200) as status_code_200