eval by rows

[jiaqya]

i have a table data where in a row has 0's . i need to replace those 0 only for that row

ex:

rowname:data
one:5
two:0
three:0
four:5

in this example i want to change 0 belonging to rowname="two" to a different value, only that row.
how to achieve it..

[richgalloway · Accepted solution]

You should be able to do it like this

... | eval data = if(rowname=="two" AND data==0, replacementValue, data)
| ...

[jiaqya]

Thanks, just one more thing, what if i have more than 1 columns , like data, data 1, date2... etc

[richgalloway]

Include the additional fields in the if function.