Splunk Search

How to write an if else condition in which i need to pass address(path)

ravi1234
New Member

I want a if else condition in which i need to pass address(path) .

Suppose:

If (condition==something)

{Go to this path(ravi/go/bin.log)}

Else if(condition==something)

{go to this path(ravi/python/bin.log)}

Please help me with this. How can we do that.

 

 

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Please be a little bit more precise on what you want to achieve and, most importantly, when you want to achieve it.

You posted in "splunk search" section so I assume you want to perform some conditional calculations. Generally, there is a conditional evaluation function if(condition,value_if_true,value_if_false).

In SPL you define a single pipeline processing all the found values. You can use the conditional evaluation in any single step but you cannot "branch" the pipeline.

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...