Answers for "evaluate mathematical expression in string"
https://answers.splunk.com/answers/661103/evaluate-mathematical-expression-in-string.html
The latest answers for the question "evaluate mathematical expression in string"Answer by knielsen
https://answers.splunk.com/answering/661125/view.html
Hmm, I just played with
base search | makemv delim="," rl | stats sum(rl) as total values(answertime) as answertime values(whateverIwanttokeep) as whatever by _raw | fields - _raw
That might be faster than my eventstats approach.
A simple function to evaluate a string with math in it does not seem to exist. :-)Fri, 25 May 2018 11:48:37 GMTknielsen