topic Re: Is aviable this feature? in Reporting

Is aviable this feature?

perryd — Fri, 12 Apr 2019 14:22:11 GMT

Hi, is available a query/function that generate a new column? I need to create a report with some data and this data are obtain from an algorithm. My algorithm is based on more calculate from two columns, moreover i need to use concatenate IF function. If i do not explained, say me.

Re: Is aviable this feature?

adonio — Fri, 12 Apr 2019 15:05:41 GMT

yes,

its called eval
https://docs.splunk.com/Documentation/Splunk/7.2.5/SearchReference/Eval

Re: Is aviable this feature?

perryd — Mon, 15 Apr 2019 10:36:09 GMT

Hi thank you, i do not found IF function, but now I see that it is possible in "eval" function.

Re: Is aviable this feature?

adonio — Mon, 15 Apr 2019 13:44:26 GMT

https://docs.splunk.com/Documentation/Splunk/7.2.5/SearchReference/ConditionalFunctions#if.28X.2CY.2CZ.29

if it answers your question, then accept answer, other what else we can help with?