Hello,
In the events, the severity is captured as values between 1 to 10. I want to represent them as High, Low, Medium etc.
For example,
if the severity is between 1 and 3 as Low
if the severity is between 4 and 5 as Medium, and so on
Please advise on how to achieve this.
Thanks in advance.
Use an eval with the case function to map severity numbers to names.
| eval severity = case(severity>=1 AND severity<=3,"Low",
severity>=4 AND severity<=5,"Medium",
severity>5,"High")
Use an eval with the case function to map severity numbers to names.
| eval severity = case(severity>=1 AND severity<=3,"Low",
severity>=4 AND severity<=5,"Medium",
severity>5,"High")