Hey, Look. I find it!
| makeresults count=2
| streamstats count as x
| eval x=if(x=1,0.00000,1.80000)
| makecontinuous x span=0.01
| eval z=split("A#B#C#D","#")
| stats values(x) as x by z
| stats count by x z
| eval y = case(x < 1 AND (z="A" OR z="C"),exact(pow(x,(2/3))) + exact(sqrt(1 - pow(x,2)))
,x < 1 AND (z="B" OR z="D"),exact(pow(x,(2/3))) - exact(sqrt(1 - pow(x,2))))
| eval x = if(z="C" OR z="D",x * -1, x)
| table x , y
| sort 0 x
| rename y as LOVE
cf. technical detail
Hey, Look. I find it!
| makeresults count=2
| streamstats count as x
| eval x=if(x=1,0.00000,1.80000)
| makecontinuous x span=0.01
| eval z=split("A#B#C#D","#")
| stats values(x) as x by z
| stats count by x z
| eval y = case(x < 1 AND (z="A" OR z="C"),exact(pow(x,(2/3))) + exact(sqrt(1 - pow(x,2)))
,x < 1 AND (z="B" OR z="D"),exact(pow(x,(2/3))) - exact(sqrt(1 - pow(x,2))))
| eval x = if(z="C" OR z="D",x * -1, x)
| table x , y
| sort 0 x
| rename y as LOVE
cf. technical detail
True love is the greatest thing in the world - except for a nice MLT - mutton lettuce and tomato san... but when discussing the application of mathematics and technology in the search for love, I feel it's important to keep in mind that your normal approach is useless here:
But, Splunk enables you to bring data from Everything, and apply it to Everything. So what are you passionate about? You could use that power for good causes and enable the charities that you are passionate about. Or maybe you're passionate about other things... maybe cars, or barbeque, or parties, brewing, or anything else you can think of. It's simply a matter of getting that data into Splunk to start analyzing it to help making decisions to improve things
And on that journey of bringing data to your passions, there have been and continue to be a lot of awesome people in the worldwide Splunk Community... Between Slack, here on Answers, Reddit, many local user groups, and lots of other places around the world and online, there are so many folks, passionate in their respective areas, who are willing to help and talk and spread new ideas about the uses of Splunk, Phantom, VictorOps, SignalFX, Omnition, UBA, DSP, and many other solutions supported by Splunk, Inc, and even those used often around Splunk solutions, to make everyone's work and personal lives better. Some of them may even share your particular passions as well!
The Splunk community is the heart of Splunk... and finding them was an experience of finding my people. I love those who have mentored me there, and I love giving back and helping others find that same spark that I had with it. Because of the Splunk Community, .conf has become much more than just a Vendor conference to learn what's new and awesome around Splunk... for me and others, it's become that camp where I know I'll be able to see in person and catch up with all the people I love, and have missed seeing them in person over the past year. These people have both seen me at my best, and helped me through my worst... and there are even a few of them where I would hop on a plane at a moments notice to come help if they needed me to.
So sure Splunk helped me find love...
Perhaps somewhat differently than you may have intended... but what is love?
<form>
<label>text to bin</label>
<fieldset submitButton="false" autoRun="true">
<input type="text" token="field1">
<label>Text</label>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>| makeresults count=1112
| streamstats current=f count
| where match(count,"^[01]?[01]?[01]?[01]$$")
| eval count =printf("%04d",count)
| stats list(count) as hex2bin
| eval counter = mvappend(mvrange(0,10),split("abcdef",""))
| appendcols [| makeresults count=256
| streamstats count as code
| eval ascii=printf("%c",code)
| stats values(ascii) as ascii
| eval code=mvrange(1,256)]
| eval text="$field1$"
| appendpipe [
| eval text_len=mvrange(1,len(text)+1)
| rex field=text_len mode=sed "s/(\d+)/bin_\1/g"
| stats count by text_len
| transpose header_field=text_len column_name=text]
| head 1
| foreach bin_*
[ eval <<FIELD>> = mvindex(split(text,""),<<MATCHSTR>> -1)
| eval <<FIELD>> = mvindex(code,mvfind(ascii,<<FIELD>>))
| eval <<FIELD>>_upper = printf("%x",floor(<<FIELD>> / 16))
| eval <<FIELD>>_lower = printf("%x",(<<FIELD>> % 16))
| eval <<FIELD>>_upper=mvindex(hex2bin,mvfind(counter,<<FIELD>>_upper))
| eval <<FIELD>>_lower=mvindex(hex2bin,mvfind(counter,<<FIELD>>_lower))
| eval result=mvappend(result,<<FIELD>>_upper,<<FIELD>>_lower)]
| table text result
| eval result=mvjoin(result," ")</query>
<earliest>0</earliest>
<latest></latest>
<sampleRatio>1</sampleRatio>
</search>
</table>
</panel>
</row>
</form>
