Where are the results of eval commands stored?
Where are the results of eval commands stored?
The results of eval commands are stored in a field. This field can be a new field created by the eval command or an existing field that is overwritten with the new values generated by the eval expression.
A: Pg 238 of the PDF
what pdf are you referring here?
I know this is an old comment but for anyone wondering, it’s the PDF included with the Splunk Fundamentals pt. 2 course.
A. Fun2 pdf 97 - results of eval written to new or existing field
A is correct. Results of eval is written to new or existing field you specify.
results of eval written to new or existing field