Splunk Search

How to write a conditional search to return a table if the value of a field is X, else, it shouldn't be displayed?

rongruspe
New Member

How to have a search that returns a table if the value of a specific field is X, else, it shouldn't be shown.

Name......Value
A..............3
B..............5
C..............20

IF: Value > 10

Name.....Value
C.............20

0 Karma
1 Solution

woodcock
Esteemed Legend

Add this:

... | where Value > 10

View solution in original post

0 Karma

woodcock
Esteemed Legend

Add this:

... | where Value > 10
0 Karma

rongruspe
New Member

Thanks! Been trying eval and stats. Wasn't able to run through the where clause. Thanks!

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...