upper

upper

📝 String

Convert all alphabetic characters to uppercase

Signature upper(string) → string

Returns

string

The input string with all characters converted to uppercase; null if input is null

The upper function converts the input string to uppercase.

Edge Cases

• If string is null, returns null
• Non-alphabetic characters (numbers, punctuation, spaces) are unchanged
• Works with Unicode characters where case conversion is defined

Examples

| eval user_upper = upper(user)

Creates a new field user_upper with the uppercase version of user.

| where upper(env) == "PRODUCTION"

Matches records where env is “production”, “Production”, “PRODUCTION”, etc.

| eval level_upper = upper(level)

Normalizes log level field to uppercase.

Used In

• eval — to create or transform string fields