Merging Data Fields with Splunk Coalesce Command

Splunk detection rules to Microsoft Sentinel built-in rules Returns the first value that isn't null coalesce(null(), Returned val, null())

How to use coalesce function in SPL 319 views · 3 years ago Splunk Commands

splunk coalesce splunk logo Splunk datadog logo Datadog new relic logo New Relic snowflake coalesce · concat · constants · env · format · join · json_decode · json_path

opposite of coalesce Hello I'm trying to utilize the coalesce eval function within Splunk However, the eval function doesn't like fields that have a space in them