<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: If else help in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520809#M35061</link>
    <description>&lt;P&gt;HR_Country =America only when SupportTier is 908&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 22 Sep 2020 11:49:12 GMT</pubDate>
    <dc:creator>priya0709</dc:creator>
    <dc:date>2020-09-22T11:49:12Z</dc:date>
    <item>
      <title>If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520248#M34970</link>
      <description>&lt;P&gt;In my query Support_tier is a field with 3 numbers eg:- 102, 103, 901,802, 908, 103, 107 and HR_Country is America&lt;/P&gt;&lt;P&gt;My requirement is to have Assignee field to display value based on below:--&lt;/P&gt;&lt;P&gt;If Support_tier have 01 &amp;amp; 02 at the end from above numbers and HR_Country is America then value of Assignee should be 'Earl Vieuten' apart from this all HR_Country which are America should have Assignee as 'Terri'&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 18 Sep 2020 06:43:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520248#M34970</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-18T06:43:16Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520253#M34973</link>
      <description>&lt;LI-CODE lang="markup"&gt;| eval Assignee=if(substr(Support_tier,2)="02" OR substr(Support_tier,2)="03","Earl Vieuten","Terri")&lt;/LI-CODE&gt;</description>
      <pubDate>Fri, 18 Sep 2020 07:13:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520253#M34973</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-18T07:13:43Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520275#M34974</link>
      <description>&lt;P&gt;Thank for your reply. I have modified my query&amp;nbsp;&lt;/P&gt;&lt;P&gt;|eval Assignee= case(substr(Support_tier, - 2)="02" AND HR_Country="America", "Jeremy")&lt;/P&gt;&lt;P&gt;But other than above Condition all HR_Country to be America should have value "Terri"&lt;/P&gt;&lt;P&gt;Unable to add 2nd condition in my query?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 18 Sep 2020 08:42:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520275#M34974</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-18T08:42:58Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520278#M34975</link>
      <description>&lt;LI-CODE lang="markup"&gt;|eval Assignee= case(substr(Support_tier, -2)="02" AND HR_Country="America", "Jeremy", substr(Support_tier, -2)!="02" AND HR_Country="America","Terri")&lt;/LI-CODE&gt;</description>
      <pubDate>Fri, 18 Sep 2020 08:59:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520278#M34975</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-18T08:59:45Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520291#M34978</link>
      <description>&lt;P&gt;Getting error with above query&lt;/P&gt;&lt;P&gt;Error in 'eval' command: Type checking failed. 'AND' only takes boolean arguments&lt;/P&gt;</description>
      <pubDate>Fri, 18 Sep 2020 09:31:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520291#M34978</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-18T09:31:39Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520292#M34979</link>
      <description>&lt;LI-CODE lang="markup"&gt;|eval Assignee= case((substr(Support_tier, -2)="02") AND (HR_Country="America"), "Jeremy", (substr(Support_tier, -2)!="02") AND (HR_Country="America"),"Terri")&lt;/LI-CODE&gt;&lt;P&gt;Try with brackets around the arguments&lt;/P&gt;</description>
      <pubDate>Fri, 18 Sep 2020 09:46:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520292#M34979</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-18T09:46:43Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520799#M35059</link>
      <description>&lt;P&gt;I have an if condition | eval Assignee=if(SupportTier="908","DG 908",Assignee)&lt;/P&gt;&lt;P&gt;Which does not work with query below. PLEASE HELP TO FIX THE QUERY&lt;/P&gt;&lt;PRE&gt;|eval Assignee= case((substr(Support_tier, -2)="02") AND (HR_Country="America"), "Jeremy", (substr(Support_tier, -2)!="02") AND (HR_Country="America"),"Terri")&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 11:33:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520799#M35059</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-22T11:33:55Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520801#M35060</link>
      <description>&lt;P&gt;In what way does it not work? What is the value of HR_Country in this instance? Also, your if have SupportTier not Support_tier, is this just a typo or a different field?&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 11:40:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520801#M35060</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-22T11:40:31Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520809#M35061</link>
      <description>&lt;P&gt;HR_Country =America only when SupportTier is 908&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 11:49:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520809#M35061</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-22T11:49:12Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520819#M35062</link>
      <description>&lt;P&gt;I will write the conditions again:--&lt;/P&gt;&lt;P&gt;SupportTier =908 &amp;amp; HR_Country = America, Assignee = DG 908&lt;/P&gt;&lt;P&gt;Also to be added with below command&lt;/P&gt;&lt;PRE&gt;|eval Assignee= case((substr(Support_tier, -2)="02") AND (HR_Country="America"), "Jeremy", (substr(Support_tier, -2)!="02") AND (HR_Country="America"),"Terri")&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 12:03:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520819#M35062</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-22T12:03:06Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520827#M35063</link>
      <description>&lt;P&gt;OK this new condition has to appear earlier in the case statement (at least before&amp;nbsp;(substr(Support_tier, -2)!="02") AND (HR_Country="America"),"Terri")&lt;/P&gt;&lt;PRE&gt;| eval Assignee= case(((&lt;SPAN&gt;Support_tier="908") AND (HR_Country="America")), "DG 908", &lt;/SPAN&gt;(substr(Support_tier, -2)="02") AND (HR_Country="America"), "Jeremy", (substr(Support_tier, -2)!="02") AND (HR_Country="America"),"Terri")&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 12:15:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520827#M35063</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-22T12:15:58Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520845#M35068</link>
      <description>&lt;P&gt;The new query doesn't work as for SupportTier 908 &amp;amp; HR_Country Assignee field turns out to be 'Terri'&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 13:01:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520845#M35068</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-22T13:01:25Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520849#M35070</link>
      <description>&lt;P&gt;Please refer attachment&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 13:05:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520849#M35070</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-22T13:05:14Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520856#M35072</link>
      <description>&lt;P&gt;You have multiple evals where country is UNITED STATES OF AMERICA so you might want to group these together&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| eval Assignee=if(HR_Country="America",case((Support_tier="908"), "DG 908", (Support_tier="909"), "Jimmy Terrell", (substr(Support_tier, -2)="01"), "Jeremy Scala", (substr(Support_tier, -2)="02"), "Jeremy Scala", 1=1 ,"Meinke, Lance and Terry"), Assignee)&lt;/LI-CODE&gt;&lt;P&gt;Essentially, if it is 908, 909, ends in 01, or ends in 02, it goes to specified people, everything else goes to Meinke, Lance and Terry&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2020 13:28:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/520856#M35072</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-22T13:28:11Z</dc:date>
    </item>
    <item>
      <title>Re: If else help</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/521071#M35093</link>
      <description>&lt;P&gt;Thank you for your great help&lt;span class="lia-unicode-emoji" title=":thumbs_up:"&gt;👍&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":thumbs_up:"&gt;👍&lt;/span&gt;&lt;span class="lia-unicode-emoji" title=":thumbs_up:"&gt;👍&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 23 Sep 2020 14:05:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/If-else-help/m-p/521071#M35093</guid>
      <dc:creator>priya0709</dc:creator>
      <dc:date>2020-09-23T14:05:15Z</dc:date>
    </item>
  </channel>
</rss>

