totitle function converts a string to title case, capitalizing the first character. Use this function to format display strings, normalize names, or create human-readable output from log data.
For users of other query languages
If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.Splunk SPL users
Splunk SPL users
In Splunk SPL, title case conversion typically requires custom functions. APL’s
totitle provides this functionality natively.ANSI SQL users
ANSI SQL users
In ANSI SQL, title case conversion varies by database. APL’s
totitle provides standardized title case conversion.Usage
Syntax
Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| value | string | Yes | The input string to convert to title case. |
Returns
Returns the input string with the first character capitalized.Use case examples
- Log analysis
- OpenTelemetry traces
- Security logs
Format HTTP methods and status codes for human-readable reports.QueryRun in PlaygroundOutput
This query formats HTTP methods in title case, making reports and dashboards more professional and easier to read.
| formatted_method | status | request_count |
|---|---|---|
| Get | 200 | 5432 |
| Post | 201 | 2341 |
| Get | 404 | 1987 |
List of related functions
- tolower: Converts strings to lowercase. Use this before totitle for consistent formatting.
- toupper: Converts strings to uppercase. Use this for fully capitalized output.
- replace_string: Replaces strings. Use this with case functions for text transformation.
- strcat: Concatenates strings. Use this with totitle to build formatted messages.