Hi All, Is it possible to perform Eval then perform lookup ? If the eval return null then perform lookupA.csv. If eval return notnull, then perform lookupB.csv thanks!
Hi all,
During evaluating round I got the error:
| stats avg(duration) AS "booking average time" by hours
| eval "booking average time"=round("booking average time",2)
Error in 'eval' c...
Hi
As you can see, I use a first eval in order to rename the field "site"
From the site renamed, I need to create a new field called "toto" in order to add new information for the field site.
S...
I'm trying to evaluate the date string to a time format sing the strptime() the format I have is: Tue_Oct_25_03:57:49_IDT_2022
the strptime function looks like: strptime(d...
Hi everyone, i want to use the below command in a single line. i have tried "comma" but it's not working. How do i do it? |eval comments= if(Action="create","something has been created",'c...
...t;.+?)$"
| search filename=Invoice.pdf OR filename=Statement.pdf OR filename=text.txt OR filename=*-*.pdf OR filename=*-*_invoice.html NOT filename=*-*_*.pdf
| eval Actual=case(filename="S...