Below is an example of what I want to accomplish:
If x="example" and y="success", return true for this segment.
If x="example2" and y="success", return true for this segment.
If x="example3" and y="success", return true for this segment.
If all are three statements = true, return true. If not all three = true, return false.
Are you looking for this?
YOUR_SEARCH | eval flag=if((x="example" OR x="example2" OR x="example3") and y="success", "true", "false")
My Sample Search :
| makeresults | eval x="example",y="success" |append [| makeresults | eval x="example2",y="failed" ] | eval flag=if((x="example" OR x="example2" OR x="example3") and y="success", "true", "false")