Actually, I already know the answer because I just discovered it and it is TOO COOL not to share!
If the value has been created as a number
, it will show right-justified
in the column, but if it has been created as a string
, it will show left-justified
. HOW COOL IS THAT!!! I wonder how long that has been in Splunk and if it is actually documented anywhere?
You can use typeof()
function to determine what is type of a field.
More info https://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/InformationalFunctions
Also, isnumber
.
Actually, I already know the answer because I just discovered it and it is TOO COOL not to share!
If the value has been created as a number
, it will show right-justified
in the column, but if it has been created as a string
, it will show left-justified
. HOW COOL IS THAT!!! I wonder how long that has been in Splunk and if it is actually documented anywhere?
Note that tostring
and tonumber
are not honored by this convention, which makes me sad.
Also typeof()
.
This is such a brilliant little detail you noticed. Thanks!!
Hey @jkjeong why the downvote here? Seriously; is there something amiss that I am totally missing?