topic Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)" in All Apps and Add-ons

SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

bagarwal — Thu, 26 May 2016 05:55:04 GMT

Hello,

Can anyone explain to me what the below syntax signifies? While validating data audit logs to CIM validator, one of the fields is saying 1 unexpected value:

When I checked in Settings->DataModels->Authetication Object; I found the eval expresssion for src as below:

if(isnull(src) OR src="","unknown",src)

What does the above syntax represent, and how can I eliminate the error found 1 unexpected values(?) to expected values.

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

woodcock — Fri, 27 May 2016 21:55:09 GMT

It is a silly way of ensuring that src is non-null (has a value). Try this instead:

coalesce(src, "unknown")

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

bagarwal — Mon, 30 May 2016 03:30:10 GMT

Thanks!! However , I want to replace value of src = ? to unknown and for that I wrote the expression as like this:

if(isnull(src) OR src="?","unknown",src) ; however it is taking the value but it replaces all other src values to unknown too. e.g if src = 172.*.*.* any IP address; it also replaces to unknown.

I tried with other way also ; but same result I am getting.

if(isnull(src) OR src=="\?","unknown",src)
if(isnull(src) OR src=="?","unknown",src)

Basically, I want only value "?" should be replaced with unknown.

If anyone can tell, it would be really help. Thanks in advance.

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

MuS — Mon, 30 May 2016 03:55:28 GMT

Have you tried

if(isnull(src) OR src=='?',"unknown",src)

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

bagarwal — Mon, 30 May 2016 04:03:44 GMT

Thanks!!
I have tried with the below combination :

if(isnull(src) OR src=='?',"unknown",src)

The result is coming correct but again replaces other values also as unknown. Is it something it is considering '?' as regex value and if yes how we can nullify it and consider as the value of src.

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

woodcock — Mon, 30 May 2016 13:22:36 GMT

Try this:

if((isnull(src) OR like(src,"?")), "unknown", src)

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

bagarwal — Tue, 31 May 2016 07:06:48 GMT

Thank You so much!! However , it is also not giving the desired result.

Is it something that the null value can only be replaced in raw data ? I am not sure though.

Re: SA-cim_validator: Why is this eval expression producing message "found 1 unexpected values (?)"

woodcock — Tue, 31 May 2016 12:05:02 GMT

This one should definitely do it.