Computes the number of characters in a string field.

ParameterTypeRequiredDefault ValueDescription
asstringoptional[a] _length Name of output field.
field[b]stringrequired   The name of the input field to length.

[a] Optional parameters use their default value unless explicitly set.

[b] The parameter name field can be omitted.

Hide omitted argument names for this function

Show omitted argument names for this function

length() Examples

Click + next to an example below to get the full details.

Count Characters in Field

Count the number of characters in a field using the length() function

Query
logscale
length(@rawstring)
Introduction

In this example, the length() function is used to count the number of characters in the @rawstring field and output the result in a field named _length.

Step-by-Step

  1. Starting with the source repository events.

  2. logscale
    length(@rawstring)

    Counts the number of characters in the field @rawstring field and outputs the result in a field named _length. This count includes all visible characters, spaces, and punctuation marks in the log entry.

    Using the as parameter, it is also possible to define another output field, for example, rawLength, if adding the following:

    length(@rawstring, as="rawLength")

  3. Event Result set.

Summary and Results

The query is used to make a count of all characters (all visible characters, spaces, and punctuation marks) in a log entry. Making a count of all characters is useful for managing and analyzing, for example, security logs, ensuring complete data capture for threat detection and incident response.