Coalesce in splunk -

Splunk Coalesce Function splunk coalesce Splunk detection rules to Microsoft Sentinel built-in rules Returns the first value that isn't null coalesce(null(), Returned val, null()) opposite of coalesce Splunk 偵測規則至Microsoft Sentinel 內 coalesce 傳回非Null 的第一個值。 coalesce(null(), Returned val

splunk coalesce Hello I'm trying to utilize the coalesce eval function within Splunk However, the eval function doesn't like fields that have a space in them