https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16802#M2253 <P>The seed is generated from the pid and the time of day, not anything to do with the results.</P> Sat, 03 Jul 2010 00:49:48 GMT Marklar 2010-07-03T00:49:48Z https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16801#M2252 <P>Since it does not appear that you can pass a number into the random() function, I'm curious to know what is being used to seed it's "randomness". </P> <P>Is it the first or last timestamp of the event(s) in your result set, or maybe the total number of events returned in the result set? Something else?</P> Sat, 03 Jul 2010 00:01:16 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16801#M2252 maverick 2010-07-03T00:01:16Z https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16802#M2253 <P>The seed is generated from the pid and the time of day, not anything to do with the results.</P> Sat, 03 Jul 2010 00:49:48 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16802#M2253 Marklar 2010-07-03T00:49:48Z https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16803#M2254 <P>Okay. and by time of day you mean the current time that the search is actually ran?</P> Sat, 03 Jul 2010 09:10:37 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16803#M2254 maverick 2010-07-03T09:10:37Z https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16804#M2255 <P>Correct. Every search is started in a new process, which is when the random number generator is seeded.</P> Tue, 06 Jul 2010 07:04:09 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-Splunk-s-eval-random-function/m-p/16804#M2255 Marklar 2010-07-06T07:04:09Z