- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Santosh2
Path Finder
04-18-2024
02:30 PM
I would like to add a column called Management to my table. The management value is not part of the event data. It is something I would like to assign based on the value of Applications:
Any help would be appreciated.
Management | Applications |
In | IIT |
In | ALP |
In | MAL |
In | HST |
Out | OCC |
In | ALY |
In | GSS |
In | HHS |
In | ISD |
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer
SplunkTrust
04-18-2024
02:53 PM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer
SplunkTrust
04-18-2024
02:53 PM
| eval Management=if(Applications="OCC", "Out", "In")
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Santosh2
Path Finder
04-18-2024
03:00 PM
@ITWhisperer Thank you so much, it really saved my time.