Splunk Search

Can i use comparations and conditional like function with search

evinasco
Communicator

Hi team

i would like to use something like that | eval foo=if(like(Description,"%[search index=prueba | fields u_id_servicio | table u_id_servicio]%"),1,0) for compare two data sources, i want to find one specific value inside other field, for example

the field "description" has the next value; abd123 and the field "u_id_servicio" has has the value; 123, i want that both values to do match with value "123" and when it happen it get value 1

Regards

Tags (2)
0 Karma

somesoni2
Revered Legend

Will index=prueba | fields u_id_servicio | table u_id_servicio always returns a single value?

0 Karma

evinasco
Communicator

I don't understand your question

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...