Need a regex toprint a special value if my matching would be commands

[bapun18]

I am working on a dashboard where my source have values like /opt/commands/abc.env, I want to print XYZ in ConfigType if my source contains commands.

Right now I am using regex | rex field=source "(?<ConfigType>commands)" and it's printing ConfigType=commands but I need to print ConfigType=XYZ

[ITWhisperer · Accepted solution]

| eval ConfigType=if(match(source,"commands"),"XYZ",null())