enumerate
Prepend a column with row numbers.
Synopsis
enumerate [<field>]
Description
The enumerate
operator prepends a new column with row numbers to the beginning
of the input record.
<field>
Sets the name of the output field.
Defaults to #
to avoid conflicts with existing field names.
Examples
Enumerate the input by prepending row numbers:
from file eve.json read suricata | select event_type | enumerate | write json
Use index
as field name instead of the default:
enumerate index