Splunk Search

How to write an if else condition in which i need to pass address(path)

ravi1234
New Member

I want a if else condition in which i need to pass address(path) .

Suppose:

If (condition==something)

{Go to this path(ravi/go/bin.log)}

Else if(condition==something)

{go to this path(ravi/python/bin.log)}

Please help me with this. How can we do that.

 

 

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Please be a little bit more precise on what you want to achieve and, most importantly, when you want to achieve it.

You posted in "splunk search" section so I assume you want to perform some conditional calculations. Generally, there is a conditional evaluation function if(condition,value_if_true,value_if_false).

In SPL you define a single pipeline processing all the found values. You can use the conditional evaluation in any single step but you cannot "branch" the pipeline.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...