Splunk Search
Highlighted

Pleasse help me with IF then ELSE condition in search query

New Member

If my search result has any count I want to append my search with OUTPUTCSV command else null.

Something like if Job.resultCount > 0 add Outputcsv command to query else null.

Tags (3)
0 Karma
Highlighted

Re: Pleasse help me with IF then ELSE condition in search query

Super Champion

will something like this work:

| appendpipe [ stats count | where count==0 |outputcsv]
0 Karma