topic Re: How can I tell a field value's type (number or string) just by looking? in Splunk Search

How can I tell a field value's type (number or string) just by looking?

woodcock — Mon, 08 Jun 2015 05:58:05 GMT

I know that I can use the isnum() and isstr() functions but surely there is a more obvious way, right?

Re: How can I tell a field value's type (number or string) just by looking?

woodcock — Mon, 08 Jun 2015 05:59:54 GMT

Actually, I already know the answer because I just discovered it and it is TOO COOL not to share!

If the value has been created as a number, it will show right-justified in the column, but if it has been created as a string, it will show left-justified. HOW COOL IS THAT!!! I wonder how long that has been in Splunk and if it is actually documented anywhere?

Re: How can I tell a field value's type (number or string) just by looking?

woodcock — Fri, 18 Aug 2017 16:50:17 GMT

Hey @jkjeong why the downvote here? Seriously; is there something amiss that I am totally missing?

Re: How can I tell a field value's type (number or string) just by looking?

ferdydek — Wed, 07 Mar 2018 20:17:48 GMT

You can use typeof() function to determine what is type of a field.
More info https://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/InformationalFunctions

Re: How can I tell a field value's type (number or string) just by looking?

woodcock — Mon, 30 Apr 2018 19:20:53 GMT

Also, isnumber.

Re: How can I tell a field value's type (number or string) just by looking?

_smp_ — Thu, 21 Nov 2019 15:56:50 GMT

This is such a brilliant little detail you noticed. Thanks!!

Re: How can I tell a field value's type (number or string) just by looking?

woodcock — Mon, 27 Jan 2020 21:35:56 GMT

Note that tostring and tonumber are not honored by this convention, which makes me sad.

Re: How can I tell a field value's type (number or string) just by looking?

woodcock — Wed, 04 Mar 2020 04:23:19 GMT

Also typeof().