Splunk Simple Math Expression using Eval

[plunkzombie]

I need a way to evaluate a simple math expression.

The following query works, and expr evaluates to result with a value of 44.

| makeresults 
| eval result=
	[| makeresults count=1 
	| noop 
	| head 1 
	| eval expr = "1*2+3*4+5*6"
	| return $expr]

But, I need to make the following type of query work.

| gentimes start=-1 
| eval expr = "1*2+3*4+5*6"
| table expr, $expr

Is there a way to do this ?

Thanks.

[ITWhisperer · Accepted solution]

Perhaps a bit convoluted by try something like this

| gentimes start=-1 
| eval expr = "1*2+3*4+5*6"
| foreach expr
	[| eval return_{<<FIELD>>} = <<FIELD>>]
| foreach return_*
    [| eval return=<<MATCHSEG1>>]

[plunkzombie]

Thank you so much. This works!

[plunkzombie]

This was just an example to show the problem that I am facing.

In the real splunk query where I need to make this work, that 'expr' gets constructed as part of the query evaluation, and is different for different rows of the table.  There is no "quotation" marks, and it is a string type. 

[Alisher]

Hello @plunkzombie,

It seems you just need to get rid of the quotation marks.

Try this:

| gentimes start=-1
| eval expr = 1*2+3*4+5*6

KR,
A.