pointerset

Splunk Community

pointerset

pointerset
Similar to pointers in C, this allows you to dereference a field like a pointer to fetch a value from another field. Usage: | pointerset threshold pointer=threshold_pointer_field ptrFieldFilter='perc*|*outlier_threshold' default=0 | makeresults | eval Field1=1 | eval Field2=2 | eval Field3=3 | eval Field4=4 | eval pointer_field='Field4' | pointerset newField pointer='pointer_field' | Field1 | Field2 | Field3 | Field4 | pointer_field | newField | | 1 | 2 | 3 | 4 | Field4 | 4 |
0 topics and 0 replies mentioned pointerset in
Latest Topics
No posts to display.
Latest Replies
No posts to display.
Top Topics
No posts to display.
My Topics
No posts to display.