Splunk Search

two's complement

clorne
Communicator

Hello I need to use the mathematical opération called "two's complement".
In C programming language it is written like that :
Complement=~B

I can't find a function similar in Splunk. If someone has an idea.

Regards

Tags (1)
0 Karma

Richfez
SplunkTrust
SplunkTrust

While it will take a minor amount of programming skills (probably not a lot), I think a scripted input may be your best choice. You could use either method described: stream it in via the script, or use the script to rewrite to a new file that Splunk reads. Either way, it's basically that you use the script to modify the latitude and longitude fields first into something like whate you need.

0 Karma

maciep
Champion

I don't think there is a function for that, but maybe you can use the answer below to save yourself some work. I guess you could just flip the bits during the replace as well?

http://answers.splunk.com/answers/222813/convert-an-hexadecimal-field-to-binary.html#answer-221785

0 Karma

clorne
Communicator

Thanks Maciep for your reply. I will be obliged to do this "string" manipulation since there is no binary operator
I do not vote for that because it seems very weird to me ...

0 Karma

richgalloway
SplunkTrust
SplunkTrust

What exactly are you trying to accomplish with two's complement? Perhaps there is another way to achieve your goal.

---
If this reply helps you, Karma would be appreciated.
0 Karma

clorne
Communicator

Hello richgalloway.
Thanks for your reply.
I have a log containing traffic data regarding planes. The purpose is to represent where the planes are.
In the log, the latitude and longitude are coded in "hex two's complement".
I need to translate the data in order to use the geostats function.

Since I did not find the function, I am preparing myself to translate each Hexadecimal character in binary code. And then replace each 1 by zero and each zero by one. But if I could find the function already done ...

Regards

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I'm not aware of any function that will perform that calculation.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...