Hi
Below is a simple example of what I am trying to do.
I am trying to remove the duplicate out of the process name. So I have the code for that but only run this code if service_type = agent-based.
So ideal I want to run an If service_type = agent-based then eval below.
However I lose the !=agent-based. that I don't want to run the eval on that.
so how to I say if agent-based run these 2 evals on that specific data and then keep the rest of the !=agent-based
| eval temp=split($Process_Name$," ")
| eval Process_Name=mvindex(temp,0)
Thanks in Advance
| eval Process_Name=if(service_type="agent-based",mvindex(split($Process_Name$," "),0),$Process_Name$)
Hi
Thanks, that is perfect.
Thanks
Rob