Computes the number of characters in a string field.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscale Syntaxlength("value")
and:
logscale Syntaxlength(field="value")
These examples show basic structure only.
length()
Examples
Click
next to an example below to get the full details.Count Characters in Field
Count the number of characters in a field using the length()
function
Query
length(@rawstring)
Introduction
In this example, the length()
function is
used to count the number of characters in the
@rawstring field and output the result in a
field named _length.
Step-by-Step
Starting with the source repository events.
- logscale
length(@rawstring)
Counts the number of characters in the field @rawstring field and outputs the result in a field named _length. This count includes all visible characters, spaces, and punctuation marks in the log entry.
Using the
as
parameter, it is also possible to define another output field, for example, rawLength, if adding the following:length(@rawstring, as="rawLength")
Event Result set.
Summary and Results
The query is used to make a count of all characters (all visible characters, spaces, and punctuation marks) in a log entry. Making a count of all characters is useful for managing and analyzing, for example, security logs, ensuring complete data capture for threat detection and incident response.