My calculated field with the following eval function is not returning values round(if(svt_due_date=="null",sv_due_date,(svt_due_date - c_isnull_reported_submited_date ))/3600000) but when I run the eval expression as a search - it does return a value. .....index=abc| eval cc_resolved_sla_hours=round(if(svt_due_date=="null",sv_due_date,(svt_due_date - c_isnull_reported_submited_date ))/3600000) I have tried using host, source type as itam* and also the source type. The svt_due_date is from another source type from the same index (the resulting value is calculation from 2 source types from the same index). I have also tried “sourcetype=itam_inc_xml OR sourcetype=itam_sla_xml” in the calculated field which did not work. Is there something I may be missing or creating the calculated fields incorrectly? ... View more