Concatenates the values of a list of fields into a single value in a new field.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscaleconcat("field")
and:
logscaleconcat(field="field")
These examples show basic structure only.
For example:
logscale
concat([aidValue, cidValue], as=checkMe2)
The function is not capable of combining arbitrary strings, or concatenating strings and fields together. The following will not work:
logscale
concat([field1,"/",field2], as=combined)
Instead, you can use the format()
function:
logscale
format("%s/%s",field=[field1,field2],as=combined)
concat()
Examples
This example will concatenate the values of the fields f1 and f2 from each event into the field combined:
logscale
concat([f1, f2], as="combined")