Splunk Search

How to typecast an integer as a string literal

jcbrendsel
Path Finder

Is there any way to explicitly typecast a number in Splunk so that it is interpreted as a string literal rather than as a number?

IE, I want '64' to be interpreted as a string rather than as an integer.

Is this possible?

Tags (1)
1 Solution

araitz
Splunk Employee
Splunk Employee

Assuming the number is the value of an extracted field:

... | eval your_field = tostring(your_field)

This and other uses of eval can be found in the search reference:

http://www.splunk.com/base/Documentation/latest/SearchReference/CommonEvalFunctions

View solution in original post

araitz
Splunk Employee
Splunk Employee

Assuming the number is the value of an extracted field:

... | eval your_field = tostring(your_field)

This and other uses of eval can be found in the search reference:

http://www.splunk.com/base/Documentation/latest/SearchReference/CommonEvalFunctions

Get Updates on the Splunk Community!

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...

From Alert to Resolution: How Splunk Observability Helps SREs Navigate Critical ...

It's 3:17 AM, and your phone buzzes with an urgent alert. Wire transfer processing times have spiked, and ...