topic Re: Using eval to set token in drilldown does not work in Splunk Search

Using eval to set token in drilldown does not work

bowesmana — Wed, 07 Jun 2017 12:25:27 GMT

I have a row in a table called DMPrice

<set token="dmp">$row.DMPrice$</set>

this works, however, if there is no DMPrice value, then the token ends up being shown as null in another html panel.

So I tried this:

<eval token="dmp">if(isnull('$row.DMPrice$',"N/A",'$row.DMPrice$')</eval>

both with and without the '' round the row var, but all I get in the html panel is $dmp$, which is what I have in the panel, i.e. referring to the token, so clearly it's not being set at all. What I wanted it to be was N/A if it's null, but no joy.

Any ideas?

Re: Using eval to set token in drilldown does not work

rjthibod — Wed, 07 Jun 2017 12:42:54 GMT

You have a syntax issue with a missing parenthesis. Try this where you don't use the single quotes and add the closing parenthesis.

<eval token="dmp">if(isnull($row.DMPrice$), "N/A", $row.DMPrice$)</eval>

Re: Using eval to set token in drilldown does not work

bowesmana — Fri, 16 Jun 2017 05:15:55 GMT

Sorry for the late response, only managed to revisit this. That worked nicely thanks. I always miss brackets with eval clauses and can never see them.