How to replace severity values by respective levels?

sidtalup27 — Wed, 02 Nov 2022 02:42:01 GMT

Hello,
In the events, the severity is captured as values between 1 to 10. I want to represent them as High, Low, Medium etc.

For example,
if the severity is between 1 and 3 as Low
if the severity is between 4 and 5 as Medium, and so on

Please advise on how to achieve this.

Thanks in advance.

Re: Replace severity values by respective levels

richgalloway — Tue, 01 Nov 2022 17:39:34 GMT

Use an eval with the case function to map severity numbers to names.

| eval severity = case(severity>=1 AND severity<=3,"Low", severity>=4 AND severity<=5,"Medium", severity>5,"High")