https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296029#M89312 <P>Hi</P> <P>How to use asterisk in the eval case search? I have to assign a value to the IP ranges. </P> <P>for Ip range 1.2.* - Low<BR /> for Ip range 3.4.* - Medium<BR /> for IP range 5.* - High</P> <P>I tried below search, its not working<BR /> search | eval case(src_ip=1.2.* , "Low", src_ip=3.4.* ,"Medium", src_ip=5.*. "High")</P> Tue, 29 Sep 2020 13:24:43 GMT kiran331 2020-09-29T13:24:43Z https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296029#M89312 <P>Hi</P> <P>How to use asterisk in the eval case search? I have to assign a value to the IP ranges. </P> <P>for Ip range 1.2.* - Low<BR /> for Ip range 3.4.* - Medium<BR /> for IP range 5.* - High</P> <P>I tried below search, its not working<BR /> search | eval case(src_ip=1.2.* , "Low", src_ip=3.4.* ,"Medium", src_ip=5.*. "High")</P> Tue, 29 Sep 2020 13:24:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296029#M89312 kiran331 2020-09-29T13:24:43Z https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296030#M89313 <P>Like this:</P> <PRE><CODE>search | eval case(like(src_ip, "1.2.%"), "Low", like(src_ip, "3.4.%") ,"Medium", like(src_ip, "5._%.%"), "High") </CODE></PRE> Tue, 28 Mar 2017 15:18:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296030#M89313 woodcock 2017-03-28T15:18:03Z https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296031#M89314 <P>Thank you!</P> Tue, 28 Mar 2017 15:33:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-eval-and-asterisk/m-p/296031#M89314 kiran331 2017-03-28T15:33:42Z