Is there a way get the value of a field whose name is the value of another field in a Splunk search?
e.g. I have a field conv_type
with value "SARUSD", and there's another field named "SARUSD". I ant to set conv_value
to the value of the field whose name is the value of conv_type
(SARUSD).
Thanks.
I don't think there is a way to do this out of the box, but it would not be too hard to write a custom search command that would do this.
Yeah. I was hoping there was some magic syntax that I couldn't find in the documentation (like eval conv_value=${conv_type}
or something), but can write a command to do it. Thanks.