format output based on IF condition

r0ckyte — Wed, 17 Jun 2020 11:52:35 GMT

Query 1:

This above is displaying the total number of connections as expected

i want to add a if condition like whenever i met this condition i want to display connections per host as per below query. i tried including the search inside but this is not helping in my case

eval flag=if(condition, [SEARCH QUERY], null())

Query 2:

Result:

host1 (1414)

host2 (1415)

host3 (1416)

host4 (3532)

Both Queries are working as expected but i'm looking if i can connect them on condition like execute query 2 only on condition of Total connections exceed.

Any help is appreciated , thank you

topic format output based on IF condition in Splunk Search

format output based on IF condition