topic Re: Using case in an eval statement, with values undefined in the case function displayed in stats table as well. in Splunk Search https://community.splunk.com/t5/Splunk-Search/Using-case-in-an-eval-statement-with-values-undefined-in-the/m-p/486790#M136136 <P>Add an entry in the <CODE>case</CODE>.</P> <PRE><CODE>basesearch | eval number = case ( number = "1" , "Number 1" , number = "2" , "Number 2" , number = "3" , "Number 3" , number = "4" , "Number 4" , 1==1, "undefined") | stats count by number </CODE></PRE> Tue, 19 Nov 2019 16:34:23 GMT richgalloway 2019-11-19T16:34:23Z Using case in an eval statement, with values undefined in the case function displayed in stats table as well. https://community.splunk.com/t5/Splunk-Search/Using-case-in-an-eval-statement-with-values-undefined-in-the/m-p/486789#M136135 <P>The command I am running is:</P> <P>basesearch | eval number = case ( number = "1" , "Number 1" , number = "2" , "Number 2" , number = "3" , "Number 3" , number = "4" , "Number 4" ) | stats count by number</P> <P>But when I run this I also want to display the values that are undefined in the eval line. How would one go about this?</P> Tue, 19 Nov 2019 15:48:17 GMT https://community.splunk.com/t5/Splunk-Search/Using-case-in-an-eval-statement-with-values-undefined-in-the/m-p/486789#M136135 amcb90 2019-11-19T15:48:17Z Re: Using case in an eval statement, with values undefined in the case function displayed in stats table as well. https://community.splunk.com/t5/Splunk-Search/Using-case-in-an-eval-statement-with-values-undefined-in-the/m-p/486790#M136136 <P>Add an entry in the <CODE>case</CODE>.</P> <PRE><CODE>basesearch | eval number = case ( number = "1" , "Number 1" , number = "2" , "Number 2" , number = "3" , "Number 3" , number = "4" , "Number 4" , 1==1, "undefined") | stats count by number </CODE></PRE> Tue, 19 Nov 2019 16:34:23 GMT https://community.splunk.com/t5/Splunk-Search/Using-case-in-an-eval-statement-with-values-undefined-in-the/m-p/486790#M136136 richgalloway 2019-11-19T16:34:23Z