https://community.splunk.com/t5/Splunk-Search/Calculated-field/m-p/689336#M234918 <P>Hi Team,</P><P>How to write a calculated field for below&nbsp;<BR /><BR />| eval action=case(like("request.path","auth/ldap/login/names"),"success")<BR /><BR />Names field will be changeing<BR />Above one is not working</P> Mon, 03 Jun 2024 03:56:54 GMT VijaySrrie 2024-06-03T03:56:54Z https://community.splunk.com/t5/Splunk-Search/Calculated-field/m-p/689336#M234918 <P>Hi Team,</P><P>How to write a calculated field for below&nbsp;<BR /><BR />| eval action=case(like("request.path","auth/ldap/login/names"),"success")<BR /><BR />Names field will be changeing<BR />Above one is not working</P> Mon, 03 Jun 2024 03:56:54 GMT https://community.splunk.com/t5/Splunk-Search/Calculated-field/m-p/689336#M234918 VijaySrrie 2024-06-03T03:56:54Z https://community.splunk.com/t5/Splunk-Search/Calculated-field/m-p/689338#M234920 <P>Assuming request.path is a field name, you are looking for&nbsp;</P><LI-CODE lang="markup">| eval action=case(like('request.path',"auth/ldap/login/names"),"success")</LI-CODE><P>&nbsp;</P> Mon, 03 Jun 2024 04:02:23 GMT https://community.splunk.com/t5/Splunk-Search/Calculated-field/m-p/689338#M234920 yuanliu 2024-06-03T04:02:23Z