How to typecast integer to string and save that to...

Splunk Search

I have a numeric field that needs to be string to put be CIM compliant. I tried using tostring, but it still shows up with the # in the interesting field list so it's still being read as a number. Also, how do I go about saving that field so it is always returned as a string to be used by the data model?

alt text

currently numeric field called

id
values      102342,23482,23498,23490

I want string field

id_string
values      102342,23482,23498,23490

1 KB

Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Customers Increasingly Choose Splunk for Observability

For the second year in a row, Splunk was recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for ...

Bridging the Gap: Splunk Helps Students Move from Classroom to Career

The Splunk Community is a powerful network of users, educators, and organizations working together to tackle ...