This page explains how to use the array_concat function in APL.
array_concat
function in APL (Axiom Processing Language) concatenates two or more arrays into a single array. Use this function when you need to merge multiple arrays into a single array structure. It’s particularly useful for situations where you need to handle and combine collections of elements across different fields or sources, such as log entries, OpenTelemetry trace data, or security logs.
Splunk SPL users
mvappend
function to concatenate multiple fields or arrays into a single array. In APL, the equivalent is array_concat
, which also combines arrays but requires you to specify each array as a parameter.ANSI SQL users
UNION
to combine results from multiple arrays or collections. In APL, array_concat
allows you to directly concatenate multiple arrays, providing a more straightforward approach.array1
: The first array to concatenate.array2
: The second array to concatenate....
: Additional arrays to concatenate.array_concat
to merge collections of user requests into a single array to analyze request patterns across different endpoints.Query_time | uri | method | combined_requests |
---|---|---|---|
2024-10-28T12:30:00 | /api/v1/textdata/cnfigs | POST | [“/api/v1/textdata/cnfigs”, “POST”] |
uri
and method
values into a single array for each log entry, allowing for combined analysis of access patterns and request methods in log data.