Usage of Splunk EVAL Function : SEARCHMATCH
Returns true if the event matches the search string X.
Find below the skeleton of the usage of the function "searchmatch" with EVAL :
...
USAGE OF SPLUNK EVAL FUNCTION : LTRIM
Usage Of Splunk Eval Function : LTRIM
"ltrim" function is an eval function. We can use one or two arguments with this function and returns the value from first argument with the...
Usage of Splunk EVAL Function : MVAPPEND
Usage of Splunk EVAL Function : MVAPPEND
Usage of Splunk EVAL Function : MVAPPEND
This function takes multiple arguments.
So arguments may be strings , multi-value fields or any single value fields.
...
Usage of Splunk EVAL Function : MVJOIN
Usage of Splunk EVAL Function : MVJOIN
Usage of Splunk EVAL Function : MVJOIN
This function takes two arguments ( X and Y)
So X will be any multi-value field name and...
Usage Of Splunk Eval Function: MVRANGE
Usage Of Splunk Eval Function: MVRANGE
"mvrange" is a eval function. We can use mvrange function to create a multivalue field for a range of numbers. This is very useful function for...
Usage of Splunk EVAL Function : CASE
Usage of Splunk EVAL Function : CASE
This function takes pairs of arguments X and Y.
X arguments are Boolean expressions
When the first X expression is encountered that evaluates to TRUE,...
Usage of Splunk EVAL Function : SPLIT
Usage of Splunk EVAL Function : SPLIT
Usage of Splunk EVAL Function : SPLIT
This function takes two arguments( X and Y ).
So X will be any field name and Y...
Usage of Splunk EVAL Function :TOSTRING
Usage of Splunk EVAL Function :TOSTRING
Usage of Splunk EVAL Function : TOSTRING
This function takes two arguments ( X and Y )
This functions converts inputs value to a string value...