Splunk Search

I want to use wildcard in eval min command as I have large number of fields and I want a separate column with min values from each row.

nkankur
Path Finder

Like
Field1 Field2 .... Min_Value
112 125 .... 112
....

eval Min_Value=min(Field*)

but it is giving below error,
Error in 'eval' command: The expression is malformed. An unexpected character is reached at ')'.

even I tried the below command,

eval Min_Value=min(Field%)

but it is giving same error

Please help!

Tags (1)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

HI

Can you please check below link?? It is the same question asked by you.

https://answers.splunk.com/answers/587912/i-want-to-use-wildcard-in-eval-min-command-as-give.html

Happy Splunking

0 Karma

horsefez
Motivator

Hi,

you are not able to address fields in splunk using wildcards.
I'm not sure if it will work, but try out this one.

| eval Min_Value=min(<<fields>>)
0 Karma

nkankur
Path Finder

I am getting below error,

Error in 'eval' command: The expression is malformed. An unexpected character is reached at '<>)'.

0 Karma

horsefez
Motivator

Well then it is simply not possible

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...