<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to use isint(X)? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77608#M181572</link>
    <description>&lt;P&gt;Make sure this * is not wildcard for matching all jobs, and you have job just matches "*" because in count(eval(field="xxx")) can not use it.&lt;/P&gt;</description>
    <pubDate>Fri, 24 Feb 2012 04:12:57 GMT</pubDate>
    <dc:creator>hjwang</dc:creator>
    <dc:date>2012-02-24T04:12:57Z</dc:date>
    <item>
      <title>How to use isint(X)?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77607#M181571</link>
      <description>&lt;P&gt;How to use isint(X) function with eval? Please give me an example.&lt;BR /&gt;
I tried the command like this but not working.&lt;BR /&gt;
... | stats count(eval(Job="*")) as JobTimes | eval status=if(isint(JobTimes))...&lt;/P&gt;

&lt;P&gt;I want to do:&lt;BR /&gt;
 if isint(JobTimes) is TRUE, then status = completed else Running.&lt;/P&gt;

&lt;P&gt;Thank You&lt;/P&gt;</description>
      <pubDate>Thu, 23 Feb 2012 22:50:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77607#M181571</guid>
      <dc:creator>gudavasr</dc:creator>
      <dc:date>2012-02-23T22:50:00Z</dc:date>
    </item>
    <item>
      <title>Re: How to use isint(X)?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77608#M181572</link>
      <description>&lt;P&gt;Make sure this * is not wildcard for matching all jobs, and you have job just matches "*" because in count(eval(field="xxx")) can not use it.&lt;/P&gt;</description>
      <pubDate>Fri, 24 Feb 2012 04:12:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77608#M181572</guid>
      <dc:creator>hjwang</dc:creator>
      <dc:date>2012-02-24T04:12:57Z</dc:date>
    </item>
    <item>
      <title>Re: How to use isint(X)?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77609#M181573</link>
      <description>&lt;P&gt;What values will JobTimes contain? What is the value white the job is running? What is the value when the job completes? If the job is not started or if it is aborted?&lt;/P&gt;</description>
      <pubDate>Mon, 27 Feb 2012 23:03:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-use-isint-X/m-p/77609#M181573</guid>
      <dc:creator>lguinn2</dc:creator>
      <dc:date>2012-02-27T23:03:58Z</dc:date>
    </item>
  </channel>
</rss>

