i have a table data where in a row has 0's . i need to replace those 0 only for that row
ex:
rowname:data
one:5
two:0
three:0
four:5
in this example i want to change 0 belonging to rowname="two" to a different value, only that row.
how to achieve it..
You should be able to do it like this
... | eval data = if(rowname=="two" AND data==0, replacementValue, data)
| ...
You should be able to do it like this
... | eval data = if(rowname=="two" AND data==0, replacementValue, data)
| ...
Thanks, just one more thing, what if i have more than 1 columns , like data, data 1, date2... etc
Include the additional fields in the if
function.