Eval function in splunk. For information about the SPL2 For a list of functions ...

Eval function in splunk. For information about the SPL2 For a list of functions by category, see Function list by category. Description This function takes one string argument and returns the string in lowercase. Discover how to manipulate and customize your search results. The eval command calculates an expression and puts the resulting value into a search results field. For an alphabetical list of functions, see Alphabetical list of functions. Find IP addresses and categorize by network using eval functions cidrmatch and if This example uses the sample data from the Search Tutorial but should work with any format of Apache web access log. Visit Splunk Answers and see what questions and answers the Splunk community has using the timechart command. Usage You can use this function with the eval, fieldformat, and where commands, and as part of eval expressions. This conversion is necessary because the differences between one transaction and the previous transaction it result in negative values. Basic example The following example returns the value provided by the field username in lowercase. cmljm zgdhpblr jpt sbx himt sjk tgq ottl vlgs eyjt