Eval

Khuzair81 — Sat, 29 May 2021 13:14:30 GMT

c= US

Language = abcdENGLISH123qw

..... | rex fields=Language "\w{4}(?<myval>)\d{4}"

| eval ans=case(c="US",myval, true(), "NA" ) | table ans, myval, c

Result

ans = NA

myval = English

c = US

I want the ans = English

Re: Eval

kamlesh_vaghela — Sat, 29 May 2021 14:48:08 GMT

@Khuzair81

Can you please try this?

YOUR_SEARCH | rex field=Language "^[a-zA-z]{4}(?<myval>\w+)\d{3}" | eval ans=case(c="US",myval, true(), "NA" ) | table ans, myval, c

My Sample Search :

| makeresults | eval c="US",Language="abcdENGLISH123qw" | rex field=Language "^[a-zA-z]{4}(?<myval>\w+)\d{3}" | eval ans=case(c="US",myval, true(), "NA" ) | table ans, myval, c

Thanks
KV
▄︻̷̿┻̿═━一

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

topic Eval in Getting Data In

Eval

Re: Eval