如何获取整数列并根据范围分配字符串值

Question

我是一个 splunk 新手，希望获取一列 int 值并根据它们所在的范围将它们显示为字符串。

I.e.
Ints from 1-100 should display: Low 
Ints from 101-200 should display: Medium 
Ints from 201-300 should display: High

我相信我可以使用 eval 语句来完成此操作，但我不确定从哪里开始。我将如何实现这一目标？

Answer 1

最简单的方法可能是将其变成 case 语句：

| eval "new_column" = case (
    variable_evaluating >= 1 AND variable_evaluating <= 100, "Low",
    variable_evaluating >= 101 AND variable_evaluating <= 200, "Medium", 
    variable_evaluating >= 201, "High")

如何获取整数列并根据范围分配字符串值

How to take column of integers and assign string value based on range

splunk