We have this table:
![alt text][1]
And we want to have a field (for example, named "value") that gets the value of the field which name is in the "name" field.
In the first row it would be value=3d, in the second row value would be value=1
Its similar to what
| eval {name} = "whatever"
would do, but reading instead of writing.
(something like | eval value = {name} but that doesn't work).
[1]: /storage/temp/277670-splunk-answers.png
↧