SPL

[LogUx]

Hello ,

I am not getting any result while executing below query. Can you please help me to know what i am doing wrong with the eval command with if condition below.

IMG_20201119_221004.jpg

 

 

[gcusello]

Hi @LogUx,

the first eval has a space before parenthesis.

Anyway, if you continue to haven't results, debug your search deleting one by one the rows from the end finding the one with problems.

In addition:

• "| fields *" isn't necessary;
• how can you have mvindex in the field host?
• what's the meaning of "| stats values(*) AS *" ?

Ciao.

Giuseppe