https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478753#M134235 <P>You should be able to do it like this</P> <PRE><CODE>... | eval data = if(rowname=="two" AND data==0, replacementValue, data) | ... </CODE></PRE> Tue, 21 Apr 2020 15:40:09 GMT richgalloway 2020-04-21T15:40:09Z https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478752#M134234 <P>i have a table data where in a row has 0's . i need to replace those 0 only for that row</P> <P>ex:</P> <P>rowname:data<BR /> one:5<BR /> two:0<BR /> three:0<BR /> four:5</P> <P>in this example i want to change 0 belonging to rowname="two" to a different value, only that row.<BR /> how to achieve it..</P> Tue, 21 Apr 2020 14:33:32 GMT https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478752#M134234 jiaqya 2020-04-21T14:33:32Z https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478753#M134235 <P>You should be able to do it like this</P> <PRE><CODE>... | eval data = if(rowname=="two" AND data==0, replacementValue, data) | ... </CODE></PRE> Tue, 21 Apr 2020 15:40:09 GMT https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478753#M134235 richgalloway 2020-04-21T15:40:09Z https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478754#M134236 <P>Thanks, just one more thing, what if i have more than 1 columns , like data, data 1, date2... etc</P> Tue, 21 Apr 2020 15:45:55 GMT https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478754#M134236 jiaqya 2020-04-21T15:45:55Z https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478755#M134237 <P>Include the additional fields in the <CODE>if</CODE> function.</P> Tue, 21 Apr 2020 16:49:56 GMT https://community.splunk.com/t5/Splunk-Search/eval-by-rows/m-p/478755#M134237 richgalloway 2020-04-21T16:49:56Z