Splunk Search

How to write an if else condition in which i need to pass address(path)

ravi1234
New Member

I want a if else condition in which i need to pass address(path) .

Suppose:

If (condition==something)

{Go to this path(ravi/go/bin.log)}

Else if(condition==something)

{go to this path(ravi/python/bin.log)}

Please help me with this. How can we do that.

 

 

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Please be a little bit more precise on what you want to achieve and, most importantly, when you want to achieve it.

You posted in "splunk search" section so I assume you want to perform some conditional calculations. Generally, there is a conditional evaluation function if(condition,value_if_true,value_if_false).

In SPL you define a single pipeline processing all the found values. You can use the conditional evaluation in any single step but you cannot "branch" the pipeline.

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...