Actually, @cmerriman's solution will not work as expected. When I tried putting other values in the domain fields, domain_all gets the last value foreach sees, which just happens to be domain_field4 in cmerriam's example. After doing a bit more digging, I managed to find a solution that in fact does return the minimal value no matter the field names' order. | makeresults
| eval domain_field1=5
| eval domain_field2=3
| eval domain_field3=2
| eval domain_field4=6
| eval domain_all=now()+(365*24*60*60)
| foreach domain_*
[| eval domain_all=min(domain_all,'<<FIELD>>')] This works like a classic "find the minimal value in a list" loop by always giving domain_all the smallest seen value. In my opinion this is a better answer than the accepted answer, since you don't always know what the biggest value could be Either way, I got the idea from epacke's accepted answer, so thanks for that 🙂
... View more
