https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480376#M192979 <P>Hi sai33,</P> <P>give this a try:</P> <PRE><CODE>| makeresults | eval A="", B="22" `comment("creates fake events")` | eval result_len_0=if(len(A) &gt; 0, A, B) </CODE></PRE> <P>Hope this helps ...</P> <P>cheers, MuS</P> Thu, 12 Sep 2019 18:44:31 GMT MuS 2019-09-12T18:44:31Z https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480375#M192978 <P>Hi All,</P> <P>I'm looking to include a If Else Check along with Len() Function along with Eval in my Search.</P> <P>My Raw syntax would be something like this:<BR /> If Len(A)&gt;o then 'A' else 'B'</P> <P>Can you please help out on creating something like the above statement using Eval.</P> <P>Thanks!</P> Thu, 12 Sep 2019 18:28:03 GMT https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480375#M192978 sai33 2019-09-12T18:28:03Z https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480376#M192979 <P>Hi sai33,</P> <P>give this a try:</P> <PRE><CODE>| makeresults | eval A="", B="22" `comment("creates fake events")` | eval result_len_0=if(len(A) &gt; 0, A, B) </CODE></PRE> <P>Hope this helps ...</P> <P>cheers, MuS</P> Thu, 12 Sep 2019 18:44:31 GMT https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480376#M192979 MuS 2019-09-12T18:44:31Z https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480377#M192980 <P>Thanks @MuS </P> Fri, 13 Sep 2019 16:54:24 GMT https://community.splunk.com/t5/Splunk-Search/If-len-then-A-else-B/m-p/480377#M192980 sai33 2019-09-13T16:54:24Z