Splunk Search

How many times we can use eval command or eval function in a single query?? Are there any limitation to use the eval , like to use only to a certain number of times in a query.. if so why?

shankeranollamu
New Member

please ans the question

Tags (1)
0 Karma

adonio
Ultra Champion

hello there,
what is the use case?
consider that many times:

| eval a = b | eval c = d | eval e = f | ... | eval n = n1

is like:

| eval a = b, c =d, e = f, ... , n = n1

hope it helps

0 Karma

skoelpin
SplunkTrust
SplunkTrust

More then you will need.. What's your purpose of wanting thousands of evals in a query?

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...