mvreverse
Description
The mvreverse
command reverses the order of the values in a multivalue field.
Syntax
mvreverse(<value>)
Usage
The mvreverse
command is a dataset processing command. See Command types.
Examples
Example 1:
Reverse the order of the values in the multivalue field a
.
... | mvreverse(a)
Example 2:
Reverse the order of the values in the multivalue field by changing "1", "2", "3"
to "3", "2", "1"
.
mvreverse(mvappend("1", "2", "3"))
Example 3:
Reverse the order of the values in multivalue field b
to "3", "2", "1"
in multivalue field a
.
| makeresults | eval b = mvappend("1","2","3"), a=mvreverse(b)
See also
- Commands
- reverse
PREVIOUS mvexpand |
NEXT nomv |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2202, 8.2.2112, 8.2.2201
Feedback submitted, thanks!