How flexible use search if statement?How flexible use search if statement?

[lacusmax]

To produce a single value dashboard, the utilization of the CPU and the MEN , and when any value exceeding the target lamp display different index value , and how to use the if statement . Whether you can use java nested stitching

[yannK]

I do not compute your question, is it related to the Splunk search language ?

Do you have any sample, search examples ?

Maybe are you thinking of the search commands like

mysearch | WHERE field>value

or

mysearch | eval field=if(condition,"valueA","valueB")

or

mysearch | eval field=case(conditionA,"valueA", conditionB,"valueB",1=1,"valuedefault")

[Ayn]

What? What is the question?