https://community.splunk.com/t5/Splunk-Search/Conditional-Macros/m-p/194853#M56201 <P>Hi vganjare,</P> <P>no, I think it is still not possible, but you can build an eval based macro <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Usesearchmacros">http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Usesearchmacros</A></P> <P>something like this:</P> <PRE><CODE>if($arg1$=="condition","true","false") </CODE></PRE> <P>cheers, MuS</P> Fri, 16 Jan 2015 12:16:45 GMT MuS 2015-01-16T12:16:45Z https://community.splunk.com/t5/Splunk-Search/Conditional-Macros/m-p/194852#M56200 <P>Hi,</P> <P>I want to dynamically include macros in search depending on the eval statements. I want to acheive something like </P> <PRE><CODE> .... | eval temp = if (condition, macro1, macro2) | further processing. </CODE></PRE> <P>Is it possible to achieve in Splunk?</P> <P>Thanks,<BR /> Vishal</P> Fri, 16 Jan 2015 11:52:26 GMT https://community.splunk.com/t5/Splunk-Search/Conditional-Macros/m-p/194852#M56200 vganjare 2015-01-16T11:52:26Z https://community.splunk.com/t5/Splunk-Search/Conditional-Macros/m-p/194853#M56201 <P>Hi vganjare,</P> <P>no, I think it is still not possible, but you can build an eval based macro <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Usesearchmacros">http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Usesearchmacros</A></P> <P>something like this:</P> <PRE><CODE>if($arg1$=="condition","true","false") </CODE></PRE> <P>cheers, MuS</P> Fri, 16 Jan 2015 12:16:45 GMT https://community.splunk.com/t5/Splunk-Search/Conditional-Macros/m-p/194853#M56201 MuS 2015-01-16T12:16:45Z