uppercase

Cortex XDR XQL uppercase function converts a string field to all uppercase letters.

Synopsis

uppercase (
<string>
)

Description

The
uppercase()
function converts a string field value to all uppercase.

Examples

Convert all
actor_process_image_name
field values that are not null to uppercase, and return a list of unique values.
dataset = xdr_data | fields actor_process_image_name as apin | dedup apin by asc _time | filter apin != null | alter apin = uppercase(apin)

Recommended For You