https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658175#M227355 <P>Thanks ITWHisperer , Much Appreciated !</P> Wed, 20 Sep 2023 17:55:51 GMT mohsplunking 2023-09-20T17:55:51Z https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658156#M227350 <P>Hello Splunkers,</P> <P>I need some help with writing a SPL, I have a field&nbsp; called "DcPolicyAction" where the value could be 0 or 1, if its 0 I want to basically call it Successful and If its 1 it is Failure , can someone help me with the SPL syntax.&nbsp; I dont want to use the stats command. Just a simple query that lists the field.</P> <P>&nbsp;</P> <P>Thank you,</P> <P>&nbsp;</P> <P>regards,</P> <P>Moh.</P> Fri, 22 Sep 2023 18:13:25 GMT https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658156#M227350 mohsplunking 2023-09-22T18:13:25Z https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658157#M227351 <LI-CODE lang="markup">| eval DcActionValue=if(DcActionValue=0,"Successful","Failure")</LI-CODE> Wed, 20 Sep 2023 15:32:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658157#M227351 ITWhisperer 2023-09-20T15:32:13Z https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658175#M227355 <P>Thanks ITWHisperer , Much Appreciated !</P> Wed, 20 Sep 2023 17:55:51 GMT https://community.splunk.com/t5/Splunk-Search/How-to-evaluate-to-Field-Value-SPL/m-p/658175#M227355 mohsplunking 2023-09-20T17:55:51Z