<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Is there a way to dynamically create fields and assign them values while my script is being executed in Splunk for a custom search? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-dynamically-create-fields-and-assign-them/m-p/192630#M55410</link>
    <description>&lt;P&gt;Yes, that is what &lt;CODE&gt;eval&lt;/CODE&gt; and &lt;CODE&gt;rex&lt;/CODE&gt; do, among others.&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Eval"&gt;http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Eval&lt;/A&gt;&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Rex"&gt;http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Rex&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;If you mean that persist outside the scope of the run of your search, then you need to use &lt;CODE&gt;outputcsv&lt;/CODE&gt; followed by &lt;CODE&gt;inputcsv&lt;/CODE&gt; the next time around.&lt;/P&gt;</description>
    <pubDate>Tue, 25 Aug 2015 23:52:27 GMT</pubDate>
    <dc:creator>woodcock</dc:creator>
    <dc:date>2015-08-25T23:52:27Z</dc:date>
    <item>
      <title>Is there a way to dynamically create fields and assign them values while my script is being executed in Splunk for a custom search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-dynamically-create-fields-and-assign-them/m-p/192629#M55409</link>
      <description>&lt;P&gt;Is there any way to &lt;STRONG&gt;create fields and assign values to them while my script is being executed for custom search?&lt;/STRONG&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 25 Aug 2015 09:12:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-dynamically-create-fields-and-assign-them/m-p/192629#M55409</guid>
      <dc:creator>kalyani_y</dc:creator>
      <dc:date>2015-08-25T09:12:03Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a way to dynamically create fields and assign them values while my script is being executed in Splunk for a custom search?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-dynamically-create-fields-and-assign-them/m-p/192630#M55410</link>
      <description>&lt;P&gt;Yes, that is what &lt;CODE&gt;eval&lt;/CODE&gt; and &lt;CODE&gt;rex&lt;/CODE&gt; do, among others.&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Eval"&gt;http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Eval&lt;/A&gt;&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Rex"&gt;http://docs.splunk.com/Documentation/Splunk/6.2.5/SearchReference/Rex&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;If you mean that persist outside the scope of the run of your search, then you need to use &lt;CODE&gt;outputcsv&lt;/CODE&gt; followed by &lt;CODE&gt;inputcsv&lt;/CODE&gt; the next time around.&lt;/P&gt;</description>
      <pubDate>Tue, 25 Aug 2015 23:52:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-dynamically-create-fields-and-assign-them/m-p/192630#M55410</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2015-08-25T23:52:27Z</dc:date>
    </item>
  </channel>
</rss>

