Re: length of string (Urgent Requirment pls)

harishalipaka · ‎11-23-2017

HI All.
i want lenght of string with include space ,double quotes everything special charecters.

|eval length=len("East1" or "East1")
|eval lenght2=len("%")

Thanks
Harish

kamlesh_vaghela · ‎11-24-2017

Hi

Can you please try this XML?

<form>
  <label>length of string (Urgent Requirment pls)</label>
  <fieldset submitButton="false">
    <input type="multiselect" token="sourcetype">
      <label>field1</label>
      <fieldForLabel>sourcetype</fieldForLabel>
      <fieldForValue>sourcetype</fieldForValue>
      <search>
        <query>index=_internal | stats count by sourcetype</query>
        <earliest>-15m</earliest>
        <latest>now</latest>
      </search>
      <delimiter>OR</delimiter>
      <valuePrefix>"</valuePrefix>
      <valueSuffix>"</valueSuffix>
      <change>
        <eval token="mytoken">replace($sourcetype$,"OR",".")</eval>
      </change>
    </input>
  </fieldset>
  <row>
    <panel>
      <html>
        $mytoken$
      </html>
    </panel>
  </row>
  <row>
    <panel>
      <table>
        <title>$sourcetype$</title>
        <search>
          <query>| makeresults | eval ppp="".$mytoken$ | eval result=if(len(ppp)=1,"All","Single") | table result ></query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

Happy Splunking

gcusello · ‎11-23-2017

Hi harishalipaka
len function gives the total lenght of a string:

index=_internal | head 1 | eval ppp="12345 67890" | eval l=len(ppp) | table l
result is 11

if you have special chars you have to use "\" backslash to escape these chars, infact

index=_internal | head 1 | eval ppp="12345 \"67890" | eval l=len(ppp) | table l
result is 12

I don't understand the examples you shared.

Bye.
Giuseppe

kamlesh_vaghela · ‎11-23-2017

Are you looking for this?

| makeresults |
eval length=len("East1\" or \"East1")
|eval lenght2=len("%")

harishalipaka · ‎12-20-2017

Hi @kamlesh vaghela ji

Congrats ,

I am feel happy when i saw this message but i dont know how to contact so i wished this way sorry.

2nd karma contest winner announced! Congrats to kamlesh_vaghela for winning the Nov 2017 competition and a free pass to .conf18!

Thanks
Harish

kamlesh_vaghela · ‎12-20-2017

HI @harishalipaka ,
Thank you very much. 🙂
You can find me on splunk slack community. Use this link: splk.it/slack

Thanks

length of string (Urgent Requirment pls)

Observe and Secure All Apps with Splunk

Splunk Decoded: Business Transactions vs Business IQ

Fastest way to demo Observability

Are you a member of the Splunk Community?

length of string (Urgent Requirment pls)

Observe and Secure All Apps with Splunk

Splunk Decoded: Business Transactions vs Business IQ

Fastest way to demo Observability