Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
Warning

This app is archived. App archiving documentation

pointerset app icon

pointerset

Similar to pointers in C, this allows you to dereference a field like a pointer to fetch a value from another field.

Built by
splunk product badge

Latest Version 1.4.1
September 17, 2020
Compatibility
Splunk Enterprise
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0
Rating

0

(0)

Log in to rate this app
Support
pointerset support icon
Not Supported
Similar to pointers in C, this allows you to dereference a field like a pointer to fetch a value from another field. Usage: | pointerset threshold pointer=threshold_pointer_field ptrFieldFilter="perc*|*outlier_threshold" default=0 | makeresults | eval Field1=1 | eval Field2=2 | eval Field3=3 | eval Field4=4 | eval pointer_field="Field4" | pointerset newField pointer="pointer_field" | Field1 | Field2 | Field3 | Field4 | pointer_field | newField | | 1 | 2 | 3 | 4 | Field4 | 4 |

Categories

Business Analytics, Utilities

Created By

Scott Barr

Type

addon

Downloads

468

Resources

Log in to report this app listing