Hi,
Can we concatenate a string with a number using eval with '.' operator? I got to know that from a video, but when i do it, I am able to do it. I don't know what is going on. Kindly help.
Regards
Suman P.
Check if the field "action" has null values. If it does, whole eval expression will be null. In stead, try like this :
source= "2access_30DAY.log"
| eval "new_field"=coalesce('action',"Default String Here, change it per your need"). 10 | table "new_field"
Check if the field "action" has null values. If it does, whole eval expression will be null. In stead, try like this :
source= "2access_30DAY.log"
| eval "new_field"=coalesce('action',"Default String Here, change it per your need"). 10 | table "new_field"
Sorry, I am being stupid. '.' operator allows concatenation of numeric and alphabets while '+' allows only concatenation of alphabets and numeric.
Regards
Suman P.
For some of your events the action field is null/not present