genai_concat_contents function concatenates all message contents from a GenAI conversation array into a single string. This is useful when you need to combine multiple conversation messages into a single text field for analysis, full-text search, or creating a complete conversation transcript.
You can use this function to create searchable conversation transcripts, prepare data for analysis, or consolidate conversation history for reporting.
For users of other query languages
If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.Splunk SPL users
Splunk SPL users
In Splunk SPL, you would typically use multiple
eval commands with mvjoin to concatenate array values, but there’s no direct equivalent for extracting and joining message contents from nested structures.ANSI SQL users
ANSI SQL users
In ANSI SQL, you would need to unnest the array and use
STRING_AGG or similar functions to concatenate values, which is more verbose.Usage
Syntax
Parameters
Returns
Returns a string containing all message contents concatenated together with the specified separator.Example
Create a searchable conversation transcript from a GenAI conversation array. Query
This query concatenates the message contents of a GenAI conversation array with a separator of
/.
List of related functions
- genai_extract_user_prompt: Extracts only the user’s prompt instead of all messages. Use this when you need just the user’s input.
- genai_extract_assistant_response: Extracts only the assistant’s response. Use this when you need just the AI’s output.
- genai_get_content_by_role: Gets content filtered by a specific role. Use this when you need messages from a particular role like ‘system’ or ‘tool’.
- genai_message_roles: Extracts all message roles from a conversation. Use this to understand the conversation structure.
- strcat_array: Concatenates a simple string array. Use this for non-GenAI arrays that don’t have the message structure.