trim_end function removes all trailing occurrences of specified characters from a string. Use this function to clean log data, remove trailing whitespace or punctuation, or standardize string formats by removing unwanted suffixes.
For users of other query languages
If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.Splunk SPL users
Splunk SPL users
In Splunk SPL, you use
rtrim for trailing whitespace. APL’s trim_end provides more flexibility with custom character sets.ANSI SQL users
ANSI SQL users
In ANSI SQL, you use
RTRIM for trailing characters. APL’s trim_end provides similar functionality.Usage
Syntax
Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| cutset | string | Yes | A string containing characters to remove from the end. |
| text | string | Yes | The source string to trim. |
Returns
Returns the source string with all trailing characters in the cutset removed.Use case examples
- Log analysis
- OpenTelemetry traces
- Security logs
Remove trailing slashes and query parameters from URIs for endpoint grouping.QueryRun in PlaygroundOutput
This query removes trailing slashes and query separator characters from URIs, enabling better endpoint aggregation.
| cleaned_uri | method | request_count |
|---|---|---|
| /api/users | GET | 2341 |
| /api/orders | POST | 1987 |
| /api/products | GET | 1654 |
List of related functions
- trim_start: Removes leading characters. Use this to trim from the beginning instead of the end.
- trim: Removes both leading and trailing characters. Use this when you need to clean both ends.
- trim_end_regex: Removes trailing matches using regex. Use this for pattern-based trimming.
- replace_string: Replaces strings. Use this when you need to remove characters from anywhere, not just the end.