I want to use wildcard in eval min command as given below:

[nkankur]

| eval MIN_VAL=min(FIELDS*)

I getting below error,

Error in 'eval' command: The expression is malformed. An unexpected character is reached at ')'.

Please help me in accomplishing this task!

Thanks in Advance 🙂

[HiroshiSatoh · Accepted solution]

Try this!

(your search) |eval MIN_VAL=※FIELDS_first
|foreach FIELDS* [eval MIN_VAL=if(MIN_VAL>'<<FIELD>>','<<FIELD>>',MIN_VAL)]

Please change FIELDS_first

[nkankur]

Thanks a lot! It is working! 🙂