https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/547185#M155134 <P>Hi,</P><P>case works fine for me... thx</P> Thu, 08 Apr 2021 13:03:39 GMT pduvofmr 2021-04-08T13:03:39Z https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/545332#M154441 <P>Hi Community,</P><P>how do i combine where and eval?<BR />Available field are "Gear" and "Torque_<SPAN class="module__title__link">Crankshaft</SPAN>"</P><P>Discribed in my human brain / language <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P><P>eval "Torque_<SPAN class="module__title__link">Wheel</SPAN>" = (where ("Gear"=1 == ("Torque_<SPAN class="module__title__link">Crankshaft</SPAN>"*<I>5.0000</I>)), ("Gear"=2 == ("Torque_<SPAN class="module__title__link">Crankshaft</SPAN>"*<I>3.2000</I>")), ("Gear"=3 == ("Torque_<SPAN class="module__title__link">Crankshaft</SPAN>"*<I>2.1429</I>)))</P> Thu, 25 Mar 2021 10:39:38 GMT https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/545332#M154441 pduvofmr 2021-03-25T10:39:38Z https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/545363#M154453 <P>Have you looked at the case function?</P> Thu, 25 Mar 2021 11:34:36 GMT https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/545363#M154453 ITWhisperer 2021-03-25T11:34:36Z https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/547185#M155134 <P>Hi,</P><P>case works fine for me... thx</P> Thu, 08 Apr 2021 13:03:39 GMT https://community.splunk.com/t5/Splunk-Search/combine-where-and-eval/m-p/547185#M155134 pduvofmr 2021-04-08T13:03:39Z