- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
VijaySrrie
Builder
06-02-2024
08:56 PM
Hi Team,
How to write a calculated field for below
| eval action=case(like("request.path","auth/ldap/login/names"),"success")
Names field will be changeing
Above one is not working
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yuanliu

SplunkTrust
06-02-2024
09:02 PM
Assuming request.path is a field name, you are looking for
| eval action=case(like('request.path',"auth/ldap/login/names"),"success")
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yuanliu

SplunkTrust
06-02-2024
09:02 PM
Assuming request.path is a field name, you are looking for
| eval action=case(like('request.path',"auth/ldap/login/names"),"success")
