Hi All,
we need to define internal and external email segregation, we have the field sender and receiver fields . If sender equals *@hello.com
and receiver equals *@hello.com
than mark as internal all others external.
Currently i did if(sender=="*@hello.com" AND receiver=="*@hello.com.au","internal","external")
but unsuccessful .
Any help?
HI @sumitkathpal2929
Try this,
| makeresults
| eval sender ="test@hello.com",receiver="test1@hello.com"
| eval result = if(match(sender,".*@hello\.com") AND match(receiver,".*@hello\.com"),"internal","external")
HI @sumitkathpal2929
Try this,
| makeresults
| eval sender ="test@hello.com",receiver="test1@hello.com"
| eval result = if(match(sender,".*@hello\.com") AND match(receiver,".*@hello\.com"),"internal","external")
Thanks, got it
eval
and where
treat *
as a literal character, not a wildcard. Use match()
.
eval
and where
commands.
... except in tsats
.