https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79822#M20185 <P>I am trying to create an if statement that if source="fschangemonitor" then it will turn from green to red. Any ideas </P> Thu, 22 Sep 2011 14:14:42 GMT itsomana 2011-09-22T14:14:42Z https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79822#M20185 <P>I am trying to create an if statement that if source="fschangemonitor" then it will turn from green to red. Any ideas </P> Thu, 22 Sep 2011 14:14:42 GMT https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79822#M20185 itsomana 2011-09-22T14:14:42Z https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79823#M20186 <PRE><CODE>**search** | eval level = case(source=="fschangemonitor",2) | rangemap field=level low=0-1 severe=2-100 default=severe </CODE></PRE> <P>Something like that?<BR /> I just copied and pasted a search I use to detect Up/Down hosts and to display the status of Up or Down in a coloured box thats red or green dependent on its state.</P> Thu, 22 Sep 2011 14:34:27 GMT https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79823#M20186 Drainy 2011-09-22T14:34:27Z https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79824#M20187 <P>Please give more details. What should turn from green to red? How does your search look right now? Are you familiar with eval's if function?</P> Thu, 22 Sep 2011 14:34:38 GMT https://community.splunk.com/t5/Splunk-Search/Creating-An-If-Statement/m-p/79824#M20187 Ayn 2011-09-22T14:34:38Z