Synopsis

Executes a custom complex computation on search query results.

Syntax

execute [expression] (as result1, result2)

Required Arguments

expression

Syntax: mathematical expression

Description: Performs on the search results, a mathematical expression that the user formulates using the Execute search syntax (see http://www.japisoft.com/formula/doc/index.html).

Optional Arguments

result1, result2

Syntax: <search string>.

Description: If the results that the executed expression returns are expected to go into more than one column, the names of the columns preceded by as must be placed in parentheses following the expression. 

Description

Executes on each event in the search query, an expression. If the returned results go into more than one column, they are entered under the columns whose names appear in parentheses after the expression.

Examples

Example 1: 

* in log.access |  execute if (total == NULL) THEN (total = 0); if (column.bytes\ sent != NULL && column.bytes\ sent != "-") THEN (total = total + column.bytes\ sent);total | group by status | order by value desc 

Computes the total of the bytes sent column of the events in log access per status, and displays the total of each status in descending order of the total value.