Splunk Search

How to write a conditional search to return a table if the value of a field is X, else, it shouldn't be displayed?

New Member

How to have a search that returns a table if the value of a specific field is X, else, it shouldn't be shown.

Name......Value
A..............3
B..............5
C..............20

IF: Value > 10

Name.....Value
C.............20

0 Karma
1 Solution

Esteemed Legend

Add this:

... | where Value > 10

View solution in original post

0 Karma

Esteemed Legend

Add this:

... | where Value > 10

View solution in original post

0 Karma

New Member

Thanks! Been trying eval and stats. Wasn't able to run through the where clause. Thanks!

0 Karma