https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/505999#M8149 <P>Hi! I am trying to rename field values from a number to a string like this:</P><P>I calculated whether the project has been past due or not by subtracting today's date minus project ask date:&nbsp;</P><P>| eval "Past/Future"=round(abs((relative_time(now(), "@d")-relative_time(strptime(project_ask_date,"%Y-%m-%d %H:%M:%S"), "@d"))/86400),0)&nbsp;</P><P>Now i want to rename the field values:&nbsp;</P><P>If the number is &gt;0 then it is past due, otherwise the project's due date is in the future.&nbsp;</P><P>Thank you!</P> Wed, 24 Jun 2020 15:51:36 GMT yvassilyeva 2020-06-24T15:51:36Z https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/505999#M8149 <P>Hi! I am trying to rename field values from a number to a string like this:</P><P>I calculated whether the project has been past due or not by subtracting today's date minus project ask date:&nbsp;</P><P>| eval "Past/Future"=round(abs((relative_time(now(), "@d")-relative_time(strptime(project_ask_date,"%Y-%m-%d %H:%M:%S"), "@d"))/86400),0)&nbsp;</P><P>Now i want to rename the field values:&nbsp;</P><P>If the number is &gt;0 then it is past due, otherwise the project's due date is in the future.&nbsp;</P><P>Thank you!</P> Wed, 24 Jun 2020 15:51:36 GMT https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/505999#M8149 yvassilyeva 2020-06-24T15:51:36Z https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/506015#M8150 <P>To be picky, rename changes the name of a field rather than change the value itself.&nbsp; To change a value you can use <FONT face="courier new,courier">eval</FONT>.&nbsp; BTW, I used a different field name because slashes are not valid field name characters.</P><LI-CODE lang="markup">... | eval PastFuture = if(PastFuture&gt;=0, "Past Due", "Future")</LI-CODE><P>&nbsp;</P> Wed, 24 Jun 2020 17:29:42 GMT https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/506015#M8150 richgalloway 2020-06-24T17:29:42Z https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/506028#M8152 <P>Thank you!&nbsp;</P> Wed, 24 Jun 2020 18:38:27 GMT https://community.splunk.com/t5/Reporting/How-to-replace-number-field-values-with-a-string/m-p/506028#M8152 yvassilyeva 2020-06-24T18:38:27Z