Concatenates the values of a list of fields into a value in a new field.

ParameterTypeRequiredDefaultDescription
as[string]false_concatThe output name of the field to set.
field[string]true Fields to concatenate. [a]

[a] If an argument name is not given, field is the default argument.

The concat() concatenates an array of fields together into a single value. For example:

logscale
concat([aidValue, cidValue], as=checkMe2)

The function is not capable of combining arbitrary strings, or concatenating strings and fields together. The following will not work:

logscale
concat([field1,"/",field2], as=combined)

Instead, you can use the format() function:

logscale
format("%s/%s",field=[field1,field2],as=combined)

concat() Examples

This example will concatenate the values of the fields f1 and f2 from each event into the field combined:

logscale
concat([f1, f2], as="combined")