Can i use 'match' within a case statement ?

[rakesh_498115]

Hi

my expression

eval Server=case( match(series,"mul"), "MULT",match(series,"lfeg"), "LFEG",match(series,"EG"), "EG",match(series,"gateway"), "EG")

Can you pls help ???

How can i do this ?

[sdaniels]

Yes, it seems like this approach can work for you. See this previous answer to make sure you've got structure correct.

http://splunk-base.splunk.com/answers/55524/eval-wildcards

[rakesh_498115]

got that .typo mistake corrected it ..