Usage of Splunk EVAL Function : CASE This function takes pairs of arguments X and Y. X arguments are Boolean expressions When the first X
Usage of Splunk EVAL Function : ABS is as follows : This Function takes the “Numeric Value” as an Input and returns its Absolute Value.
Usage of Splunk commands : ACCUM is as follows : Keeps a running total of a specified numeric field.
We might need to replace the Master-Node for either of these reasons : 1. The Node Fails 2. We need to move the Master to