Logging Analytics: Query language enhancements

The following 5 new enhancements are available in Logging Anaytics query language:

  • Use the replace function in eval command for performing multiple replacements. See replace Function Details.
  • Use toNumber function in eval command to convert hex and octal strings to numbers. See eval.
  • Use dateAdd and dateSet functions in your search. See Specify the Time Range in Your Query.
  • Use ifNull function in eventstats, geostats, stats, and timestats commands to return a specific value of the result is null. This function is not supported after link command. See eventstats.
  • Support to use outlier command in scheduled search detection rules. See Example Queries for Scheduled Tasks.