mvreverse
Description
The mvreverse
command reverses the order of the values in a multivalue field.
Syntax
mvreverse(<value>)
Usage
The mvreverse
command is a dataset processing command. See Command types.
Examples
Example 1:
Reverse the order of the values in the multivalue field a
.
... | mvreverse(a)
Example 2:
Reverse the order of the values in the multivalue field by changing "1", "2", "3"
to "3", "2", "1"
.
mvreverse(mvappend("1", "2", "3"))
Example 3:
Reverse the order of the values in multivalue field b
to "3", "2", "1"
in multivalue field a
.
| makeresults | eval b = mvappend("1","2","3"), a=mvreverse(b)
See also
- Commands
- reverse
PREVIOUS mvexpand |
NEXT nomv |
This documentation applies to the following versions of Splunk® Enterprise: 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.2.0, 9.2.1
Feedback submitted, thanks!