lower() Query Function

Changes text of a given string field to lowercase letters.

Parameters

Name

Type

Required

Default

Description

field

string

Yes

The name of the input field with the value to lowercase.

type

string

No

The name of the locale to use, as ISO 639 language and an optional ISO 3166 country, such as da, da_DK or en_US. When not specified, uses the system locale.

as

string

No

_lower

Name of output field.

The implied parameter is field.

Examples

With an event with a field Bar=CONTENTS, you get contents in the _lower field:

humio
lower("Bar")

With an event with a field Bar=CONTENTS, you get contents in the Foo field:

humio
Foo:=lower("Bar")

With an event with a field Bar=CONTENTS, you get contents in the Foo field:

humio
lower("Bar", as="Foo")