<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Nested if in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Nested-if/m-p/566838#M100730</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;In a field status contains two values one is failure and another is success.&lt;/P&gt;&lt;P&gt;Where in failure it contains some description values also an null value.&lt;/P&gt;&lt;P&gt;Also in success it contain description as null value.&lt;/P&gt;&lt;P&gt;As I am confused how to check null condition as it contains in both failure and success descriptions.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Madhusri R&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 13 Sep 2021 11:31:12 GMT</pubDate>
    <dc:creator>Madhusri</dc:creator>
    <dc:date>2021-09-13T11:31:12Z</dc:date>
    <item>
      <title>Nested if</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Nested-if/m-p/566838#M100730</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;In a field status contains two values one is failure and another is success.&lt;/P&gt;&lt;P&gt;Where in failure it contains some description values also an null value.&lt;/P&gt;&lt;P&gt;Also in success it contain description as null value.&lt;/P&gt;&lt;P&gt;As I am confused how to check null condition as it contains in both failure and success descriptions.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Madhusri R&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 13 Sep 2021 11:31:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Nested-if/m-p/566838#M100730</guid>
      <dc:creator>Madhusri</dc:creator>
      <dc:date>2021-09-13T11:31:12Z</dc:date>
    </item>
    <item>
      <title>Re: Nested if</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Nested-if/m-p/566841#M100731</link>
      <description>&lt;P&gt;isnull() and isnotnull() are the two functions you should look at e.g.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| eval status=if(isnotnull(description),"not empty","null")
| eval status=if(isnull(description),"null","not empty")&lt;/LI-CODE&gt;</description>
      <pubDate>Mon, 13 Sep 2021 12:08:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Nested-if/m-p/566841#M100731</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-09-13T12:08:03Z</dc:date>
    </item>
  </channel>
</rss>

