- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
mohsplunking
Path Finder
09-20-2023
08:29 AM
Hello Splunkers,
I need some help with writing a SPL, I have a field called "DcPolicyAction" where the value could be 0 or 1, if its 0 I want to basically call it Successful and If its 1 it is Failure , can someone help me with the SPL syntax. I dont want to use the stats command. Just a simple query that lists the field.
Thank you,
regards,
Moh.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
09-20-2023
08:32 AM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
mohsplunking
Path Finder
09-20-2023
10:55 AM
Thanks ITWHisperer , Much Appreciated !
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
09-20-2023
08:32 AM
| eval DcActionValue=if(DcActionValue=0,"Successful","Failure")
