Formula - Field
New 6.1
The field Formula function extracts the value from a named field from a Log Event.
Here's an example of Field values from the search field wizard modal.
Quick example
Let's get you started with the following example:
| Input | Expression | Result |
|---|---|---|
|
|
|
| Text Data | Field | Unique values |
Features
- Extract the value from the named pre-defined field of a Nodinite Log Event.
- You can nest this operation.
Important
This plugin loads the entire message into RAM, so make sure to apply this function only on small messages..
How to use
To configure the Formula plugin with the field function:
- Select Formula as the expression type plugin.
- Write down the expression to use in the 'Expression' text area with the named Field to extract, for example,
field('MessageGUID'). - The Fields and the Field Values are on display in the Field Values tab.
- The result is displayed.
Here's an example of extracting a value from a Field using the search field wizard.
Syntax
The field function has one parameter which is the name of the Field (case-sensitive):
- field('Name')
| Name | Description |
|---|---|
| ApplicationInterchangeId | Id for Application scope |
| EndPointDirection | Endpoint Direction |
| EventDirection | EventDirection |
| EventId | Id of event (Guid) |
| LocalInterchangeId | Id for local scope |
| LogDateTime | The originating date time for the Log Event |
| MessageGUID | The Id of the main body part (Guid) |
| OriginalMessageTypeName | The name of the Message Type |
| TotalSize | Size in bytes |
Next Step
How to Add or manage Search Fields
How to Add or manage Log Views
What are Search Fields?
What are Search Field Expressions?
What are Message Types?
What are Log Views?
Related
- Body - Extract body from the Log Event
- Context - Extract value from key-value collection
- ContextKey - Extract value from the key-value collection using RegEx
Expression Type Plugins are used in Search Fields