genai_get_content_by_index function retrieves the content of a message at a specific position in a GenAI messages array. This allows you to access messages by their position in the conversation sequence.
You can use this function to extract specific messages in a conversation flow, analyze conversation structure, retrieve intermediate messages, or process conversations sequentially.
For users of other query languages
If you come from other query languages, this section explains how to adjust your existing queries to achieve the same results in APL.Splunk SPL users
Splunk SPL users
In Splunk SPL, you would use
mvindex to access array elements by position.ANSI SQL users
ANSI SQL users
In ANSI SQL, you would unnest the array and use
OFFSET to access specific positions.Usage
Syntax
Parameters
- messages (dynamic, required): An array of message objects from a GenAI conversation. Each message typically contains
roleandcontentfields. - index (long, required): The zero-based position of the message to retrieve. Use 0 for the first message, 1 for the second, etc.
Returns
Returns a string containing the content of the message at the specified index, or an empty string if the index is out of bounds.Use case examples
- Log analysis
- OpenTelemetry traces
- Security logs
Extract the first user message in each conversation to analyze how users initiate conversations.QueryRun in PlaygroundOutput
This query helps you understand how users typically start conversations, which can inform greeting messages and initial prompts.
| _time | id | first_message |
|---|---|---|
| 2024-01-15T10:30:00Z | user_123 | Hello, I need help with my account. |
| 2024-01-15T10:31:00Z | user_456 | Can you tell me about your services? |
List of related functions
- genai_get_content_by_role: Gets content filtered by role. Use this when you need messages from a specific role rather than a specific position.
- genai_get_role: Gets the role at a specific index. Combine with this function to understand both role and content at positions.
- array_length: Returns array length. Use this to check message count before accessing by index.
- genai_extract_user_prompt: Extracts the last user prompt. Use this when you need the most recent user message instead of a specific index.
- genai_extract_assistant_response: Extracts the last assistant response. Use this when you need the most recent AI response.