Splunk Search

How to write an if else condition in which i need to pass address(path)

ravi1234
New Member

I want a if else condition in which i need to pass address(path) .

Suppose:

If (condition==something)

{Go to this path(ravi/go/bin.log)}

Else if(condition==something)

{go to this path(ravi/python/bin.log)}

Please help me with this. How can we do that.

 

 

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Please be a little bit more precise on what you want to achieve and, most importantly, when you want to achieve it.

You posted in "splunk search" section so I assume you want to perform some conditional calculations. Generally, there is a conditional evaluation function if(condition,value_if_true,value_if_false).

In SPL you define a single pipeline processing all the found values. You can use the conditional evaluation in any single step but you cannot "branch" the pipeline.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...