Hello,
I have got a field name "test_time.space_used" in the events and I need to perform arithmetic operations to this field.
| eval test_time.space_used = test_time.space_used/1024/1024
But this is not producing any results. Can you assist me on this?
Thanks in advance
@bollam ,
Try
| eval test_time.space_used = 'test_time.space_used'/1024/1024
@bollam ,
Try
| eval test_time.space_used = 'test_time.space_used'/1024/1024
@renjith.nair, Thanks !! It worked