Hi, I want to use an eval if statement to add a minus onto the original value if it's is true. I am using table command to display these results.
Value0 = 10
Value1 = No
In the above scenario I want Value0 to to become -10
What I have so far only replaces Value0 with "-" only and does not retain the original Value0. What is the correct way to do this
Search | eval Value0=if(Value1="No", "-" ,Value0)
Thank you
@alex389,
eval Value0=if(Value1=="No",-1*Value0,Value0)
@alex389,
eval Value0=if(Value1=="No",-1*Value0,Value0)
Just in case if you need a '-' character for non integer field then, "." is the concatenation operator.
eval Value0=if(Value1=="No","-".Value0,Value0)