Splunk Search

Usage suggestion for eval

brettcave
Builder

It would be great if "eval" could do multiple evaluations in a single command, in a similar way that "stats" can:

stats sum(someField) as "sumField" sum(otherField) as "sumOtherField"

and with eval:

... | eval field1=(eval statement) field2=(eval statement)

instead of | eval | eval | eval

Tags (2)
1 Solution

BobM
Builder

Yes it would but this isn't a question. I suggest you contact support asking for this as an enhancement request.

View solution in original post

BobM
Builder

Yes it would but this isn't a question. I suggest you contact support asking for this as an enhancement request.

brettcave
Builder

ok, sorry, thought this forum could be used for suggestions / feedback around ideas.

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...