topic How to create a new field using eval and display it in a table? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259845#M77886 <P>I am struggling to make eval work with table.<BR /> Check out the screenshot below:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/1381i30DB35FDDF049B92/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>I would expect this to create a field titled <STRONG>Event_Detail</STRONG>, that it would represent the length and that they would be displayed with the table command, but that is not the case here.</P> <P>I'm sure I am missing something simple. </P> Fri, 20 May 2016 20:06:43 GMT mdufrasne 2016-05-20T20:06:43Z How to create a new field using eval and display it in a table? https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259845#M77886 <P>I am struggling to make eval work with table.<BR /> Check out the screenshot below:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/1381i30DB35FDDF049B92/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>I would expect this to create a field titled <STRONG>Event_Detail</STRONG>, that it would represent the length and that they would be displayed with the table command, but that is not the case here.</P> <P>I'm sure I am missing something simple. </P> Fri, 20 May 2016 20:06:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259845#M77886 mdufrasne 2016-05-20T20:06:43Z Re: How to create a new field using eval and display it in a table? https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259846#M77887 <P>Try placing the field name within quotes: len("logdata.processInfo.ProcessName")</P> Fri, 20 May 2016 20:15:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259846#M77887 jpolcari 2016-05-20T20:15:08Z Re: How to create a new field using eval and display it in a table? https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259847#M77888 <P>Dot <CODE>(.)</CODE> is a special char in eval (for concatenation) so you would need to quote it, single and double quotes both will work.</P> Fri, 20 May 2016 20:28:47 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-new-field-using-eval-and-display-it-in-a-table/m-p/259847#M77888 somesoni2 2016-05-20T20:28:47Z