Wildcard eval to divide multiple values with a constant number like 2

[batcave]

I have a search which gets timings across many Streets. But these times are in seconds and I want to convert to minutes. Is there a way to wildcard eval all these values?

e.g.

timechart perc95(*Street) AS *Street  -- > values are in seconds 

I want something in minutes like this:

e.g.

timechart perc95(*Street)/60 AS *Street  --> Ofcourse this doesnt work but you get the idea I think.

[martin_mueller]

Give this a try: http://splunk-base.splunk.com/apps/76026/scale-command

[martin_mueller]

My boss has allowed me some time to build a wildcard-capable scaling command 🙂

[batcave]

yep true. that's why searching for a way to do it alternatively

[martin_mueller]

eval doesn't do wildcards, they get confused with the multiplication sign.

[batcave]

anyone have an answer to this? anyone from Splunk?

[batcave]

By doing *Street, I can get all timechart of all the fields ending with "Street" for e.g. BrooklynStreet,WestStreet,etc.

[martin_mueller]

Just to clarify, there are wildcards hidden in the formatting, right?

timechart perc95(*Street) AS *Street