Abstract
Learn more about the Cortex Query Language multiply()
function that multiplies two integers.
Syntax
multiply (<string> | <integer>, <string> | <integer>)
Description
The multiply()
function multiplies two positive integers. Parameters can be either integer literals, or integers as a string type such as might be contained in a data field.
Example
dataset = xdr_data | alter mynum = multiply(action_file_size, 3) | fields action_file_size, mynum | filter action_file_size > 0 | limit 1