The genai_concat_contents function concatenates all message contents from a GenAI conversation array into a single string. This is useful when you need to combine multiple conversation messages into a single text field for analysis, full-text search, or creating a complete conversation transcript.
You can use this function to create searchable conversation transcripts, prepare data for analysis, or consolidate conversation history for reporting.
For users of other query languages
If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.
In Splunk SPL, you would typically use multiple eval commands with mvjoin to concatenate array values, but there’s no direct equivalent for extracting and joining message contents from nested structures.
['ai-logs']
| extend all_content = genai_concat_contents(messages, ' ')In ANSI SQL, you would need to unnest the array and use STRING_AGG or similar functions to concatenate values, which is more verbose.
['ai-logs']
| extend all_content = genai_concat_contents(messages, ' ')Usage
Syntax
genai_concat_contents(messages, separator)Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| messages | dynamic | Yes | An array of message objects from a GenAI conversation. Each message typically contains a role and content field. |
| separator | string | No | The string used to separate message contents. Default is a space character (' '). |
Returns
Returns a string containing all message contents concatenated together with the specified separator.
Example
Create a searchable conversation transcript from a GenAI conversation array.
Query
['otel-demo-genai']
| extend conversation_text = genai_concat_contents(['attributes.gen_ai.input.messages'], ' / ')Output
| conversation_text |
|---|
| "Hello, how are you? / I'm good, thank you! / What's your name? / My name is John. / What's your favorite color? / My favorite color is blue. /" |
This query concatenates the message contents of a GenAI conversation array with a separator of /.
List of related functions
- genai_extract_user_prompt: Extracts only the user's prompt instead of all messages. Use this when you need just the user's input.
- genai_extract_assistant_response: Extracts only the assistant's response. Use this when you need just the AI's output.
- genai_get_content_by_role: Gets content filtered by a specific role. Use this when you need messages from a particular role like 'system' or 'tool'.
- genai_message_roles: Extracts all message roles from a conversation. Use this to understand the conversation structure.
- strcat_array: Concatenates a simple string array. Use this for non-GenAI arrays that don't have the message structure.