Implementing Splunk 7, Third Edition: Effective operational

USAGE OF SPLUNK EVAL FUNCTION : COALESCE splunk coalesce coalesce eval remote_host = replace ( remote_host , d + $ , ) splunk coalesce Using the splunk coalesce command can create a new field with information from both fields and can also insert a value if none exists

coalesce bigquery The COALESCE function takes two or more compatible arguments and returns the first argument that is not null