Splunk Search

How to repeat a string in multiple row table

Hi,

I have written a search query to get a table as shown below:

alt text

I want to add one more column, where I want to repeat the string "overhead" in all the existing rows.
i.e.

alt text

Please guide me how to do this.

Tags (4)
0 Karma

SplunkTrust
SplunkTrust

Hi harshal,

just add an eval to your search like this

YourMagicSearchFu | eval parameter="overhead" | table parameter ID Value

hope this helps ...

cheers, MuS

SplunkTrust
SplunkTrust

HeHe, thanks somesoni2 for correcting the eval command 😉

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!