Hello - I am getting the below error. I am trying to add pipe "|" for all the results.
Error : Failed to parse templatized search for field 'ResponseTime(ms)'
My search :
| table PeriodDate VendorName ContractName OccMetricCode Pagekey TransactionType TransactionDatetime ResponseTime(ms) Comment
| foreach * [ eval <<FIELD>>="|".<<FIELD>>."|"]
I am not getting pipe seperated results only for ResponseTime
PeriodDate |
ResponseTime(ms) |
Comment |
|2022/08/30| |
0 |
|| |
Thanks in advance
Try something like this
| table PeriodDate VendorName ContractName OccMetricCode Pagekey TransactionType TransactionDatetime ResponseTime(ms) Comment
| foreach * [ eval "<<FIELD>>"="|".'<<FIELD>>'."|"]
To add to @ITWhisperer reply. When handling field names that start with numbers, or contain 'odd' characters, e. g. in this case the brackets, (), you need to use single quote characters on the right hand side of eval. It's always sensible, particularly when using foreach, to DOUBLE quote the left hand side of the eval, i.e.
| eval "QUOTED NAME"='Quoted(ms) field'
Try something like this
| table PeriodDate VendorName ContractName OccMetricCode Pagekey TransactionType TransactionDatetime ResponseTime(ms) Comment
| foreach * [ eval "<<FIELD>>"="|".'<<FIELD>>'."|"]
Thanks @ITWhisperer