Hello Splunkers,
I need some help with writing a SPL, I have a field called "DcPolicyAction" where the value could be 0 or 1, if its 0 I want to basically call it Successful and If its 1 it is Failure , can someone help me with the SPL syntax. I dont want to use the stats command. Just a simple query that lists the field.
Thank you,
regards,
Moh.
Thanks ITWHisperer , Much Appreciated !
| eval DcActionValue=if(DcActionValue=0,"Successful","Failure")