splunk coalesce
A collection of useful Splunk SPL
splunk coalesce
Regular
price
1000 ₹ INR
Regular
price
Sale
price
1000 ₹ INR
Unit price
/
per
website splunk coalesce Hello I'm trying to utilize the coalesce eval function within Splunk However, the eval function doesn't like fields that have a space in them coalesce db2 Splunk is the #1 big data platform in the market today, and can deliver powerful insights in the areas of security and IT operations
splunk coalesce coalesce eval remote_host = replace ( remote_host , d + $ , ) Double quotes make splunk think the value is a literal string, rather than a field Use single quotes in your coalesce instead, and you should coalesce eval remote_host=replace(remote_host, d+$,)