mvreverse
Description
The mvreverse
command reverses the order of the values in a multivalue field.
Syntax
mvreverse(<value>)
Usage
The mvreverse
command is a dataset processing command. See Command types.
Examples
Example 1:
Reverse the order of the values in the multivalue field a
.
... | mvreverse(a)
Example 2:
Reverse the order of the values in the multivalue field by changing "1", "2", "3"
to "3", "2", "1"
.
mvreverse(mvappend("1", "2", "3"))
Example 3:
Reverse the order of the values in multivalue field b
to "3", "2", "1"
in multivalue field a
.
| makeresults | eval b = mvappend("1","2","3"), a=mvreverse(b)
See also
- Commands
- reverse
PREVIOUS mvexpand |
NEXT nomv |
This documentation applies to the following versions of Splunk® Enterprise: 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12
Feedback submitted, thanks!