If Else functionality to pick different subsearch

[pbarbuto]

Depending on what month it is I need to run a different sub-search.

index=foo source=bar
    [| inputlookup servers.csv where myfield="this" 
    | eval nowMonth=strftime(now(), "%m") 
    | where nowMonth=06
    | eval host=name
    | fields host] 
    [| inputlookup servers.csv where myfield="that" 
    | eval nowMonth=strftime(now(), "%m") 
    | where nowMonth!=06 
    | eval host=name
    | fields host]

So basically if its the current month I want to run the first inputlookup, and if its NOT the current month I want to run the 2nd inputlookup. is this doable?

[FrankVl]

Think that can be done in one go, like this:

index=foo source=bar
     [| inputlookup servers.csv  
     | eval nowMonth=strftime(now(), "%m") 
     | eval choice = if(nowMonth="06","this","that")
     | where myfield=choice
     | eval host=name
     | fields host]