Getting Data In

How to create an If Statement in Props.conf?

Path Finder

I need to set a value based on another value.

How would I do this:

if severity = 1 severity=high

One of my customers thought I can use a lookup table? I know I can do this in a search but not sure in a props.conf.

0 Karma

SplunkTrust
SplunkTrust

Why not do this at search time?

0 Karma

Path Finder

good question. I was asked on Friday when we were normalizing fields for ES. I will ask.