https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34194#M7346 <P>got that .typo mistake corrected it ..</P> Wed, 15 May 2013 11:47:11 GMT rakesh_498115 2013-05-15T11:47:11Z https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34193#M7345 <P>Hi</P> <P>my expression</P> <P>eval Server=case( match(series,"mul"), "MULT",match(series,"lfeg"), "LFEG",match(series,"EG"), "EG",match(series,"gateway"), "EG")</P> <P>Can you pls help ??? </P> <P>How can i do this ?</P> Wed, 15 May 2013 11:43:51 GMT https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34193#M7345 rakesh_498115 2013-05-15T11:43:51Z https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34194#M7346 <P>got that .typo mistake corrected it ..</P> Wed, 15 May 2013 11:47:11 GMT https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34194#M7346 rakesh_498115 2013-05-15T11:47:11Z https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34195#M7347 <P>Yes, it seems like this approach can work for you. See this previous answer to make sure you've got structure correct.</P> <P><A href="http://splunk-base.splunk.com/answers/55524/eval-wildcards">http://splunk-base.splunk.com/answers/55524/eval-wildcards</A></P> Wed, 15 May 2013 12:36:37 GMT https://community.splunk.com/t5/Splunk-Search/Can-i-use-match-within-a-case-statement/m-p/34195#M7347 sdaniels 2013-05-15T12:36:37Z