How can I use * in eval if statement? - Splunk Community

Splunk Search

| eval RouteLatency = if (Name="ABC" AND HTTP="*https://.net.*.com*" , bckLatency ,RouteLatency )

use "like" function

| eval RouteLatency = if (Name="ABC" AND like(HTTP,"%https://.net.%.com%") , bckLatency ,RouteLatency )

Either use match() to match with regex or searchmatch() to match "searchlike".

Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

Now On Demand Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...