Concatenates the values of a list of fields into a value in a new field.

Function Traits: FieldComputationFunction, Transformation

ParameterTypeRequiredDefaultDescription
asstringoptional_concat The output name of the field to set.
field[a]Array of stringsrequired  Fields to concatenate.

[a] The argument name field can be omitted.

The parameter name for field can be omitted; the following forms are equivalent:

logscale
concat("value")

and:

logscale
concat(field="value")

The concat() concatenates an array of fields together into a single value. For example:

logscale
concat([aidValue, cidValue], as=checkMe2)

The function is not capable of combining arbitrary strings, or concatenating strings and fields together. The following will not work:

logscale
concat([field1,"/",field2], as=combined)

Instead, you can use the format() function:

logscale
format("%s/%s",field=[field1,field2],as=combined)

concat() Examples

This example will concatenate the values of the fields f1 and f2 from each event into the field combined:

logscale
concat([f1, f2], as="combined")