How to combine a few eval cases to a single search?

[faizolsaidin]

Hi,

How could i combine few eval cases into single count search.

Search as below :

| eval a = case(Name LIKE "abc%efg%123" AND State="Running",1,Name LIKE "abc%efg%123" AND State!="Running",0) 
| eval b = case(Name LIKE "abc%efg%456" AND State="Running",1,Name LIKE "abc%efg%456" AND State!="Running",0) 
| eval c = case(Name LIKE "abc%efg%789" AND State="Running",1,Name LIKE "abc%efg%789" AND State!="Running",0) 

[PowerPacked]

Hi @faizolsaidin

Am not sure, if i understood your question correctly

But you can give multiple eval statements in single eval like below,

| eval a = case(Name LIKE "abc%efg%123" AND State="Running",1,Name LIKE "abc%efg%123" AND State!="Running",0),  b = case(Name LIKE "abc%efg%456" AND State="Running",1,Name LIKE "abc%efg%456" AND State!="Running",0), c = case(Name LIKE "abc%efg%789" AND State="Running",1,Name LIKE "abc%efg%789" AND State!="Running",0) 

Thanks

[faizolsaidin]

My bad, my question should be with the query that i had from the eval cases above, i would like to combine it in order to monitor all cases in single search instead to have it separately. Since it was part of my base search but i'm creating this of 1 piece in my Glass table. Hope this helps to clarify.