Description
The
subtract()
function subtracts two positive integers. Parameters
may be either integer literals, or integers as a string type such as might
be contained in a data field. For example:
dataset = xdr_data
| alter mynum = subtract(action_file_size, 3)
| fields action_file_size, mynum
| filter action_file_size > 3
| limit 1