Splunk dashboard do mathematical operation for set token value

[raghu_vedic]

Hi,

I want to set token value for setTailValue
if $job.resultCount$ is 3 then value have to set 20-17=3, but its displaying 20-17 as it taking string.

          <set token="setTailValue">20-$job.resultCount$</set>

[rjthibod · Accepted solution]

If you are using Splunk 6.3 or newer, you can use eval

<eval token="setTailValue">20-$job.resultCount$</eval>

[Umesh_Vedicsoft]

Hi raghu_vedic,

Here you can use <eval token="setTailValue">20-$job.resultCount$</eval> instead of <set token="setTailValue">20-$job.resultCount$</set>