mvreverse
Description
The mvreverse
command reverses the order of the values in a multivalue field.
Syntax
mvreverse(<value>)
Usage
The mvreverse
command is a dataset processing command. See Command types.
Examples
Example 1:
Reverse the order of the values in the multivalue field a
.
... | mvreverse(a)
Example 2:
Reverse the order of the values in the multivalue field by changing "1", "2", "3"
to "3", "2", "1"
.
mvreverse(mvappend("1", "2", "3"))
Example 3:
Reverse the order of the values in multivalue field b
to "3", "2", "1"
in multivalue field a
.
| makeresults | eval b = mvappend("1","2","3"), a=mvreverse(b)
See also
- Commands
- reverse
PREVIOUS mvexpand |
NEXT nomv |
This documentation applies to the following versions of Splunk Cloud Platform™: 9.1.2312, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209, 9.0.2303, 9.0.2305, 9.1.2308 (latest FedRAMP release)
Feedback submitted, thanks!