- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hello
In my search I use an eval command like below in order to identify character string in web url
| eval Kheo=case(
like(url,"%SLG%"),"G",
like(url,"%SLK%"),"G",
like(url,"%SLY%"),"I",
like(url,"%SK%"),"T",
like(url,"%SL%"),"E"
)
| search Kheo=*
The problem I have is that my eval identify every url which conatains for example "SLG" letters in lowercase or uppercse
My need is to strictly identify URL which contains "SLG" letters in uppercase
I tried with match but it changes nothing
| eval Kheo=case(
match(url,"SLG"),"G",
could you help please?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

@jip31 - Try this instead:
| eval Kheo=case(
match(url,"SLG"),"G",
match(url,"SLK"),"G",
match(url,"SLY"),"I",
match(url,"SK"),"T",
match(url,"SL"),"E"
)
-------
I hope this helps!!! Kindly upvote if it does!!!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

@jip31 - Try this instead:
| eval Kheo=case(
match(url,"SLG"),"G",
match(url,"SLK"),"G",
match(url,"SLY"),"I",
match(url,"SK"),"T",
match(url,"SL"),"E"
)
-------
I hope this helps!!! Kindly upvote if it does!!!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I dont say its not working but it doesnt work exactly like i need
For exemple, if i am looking for
eval Kheo=case( like(url,"%SLG%"),"G",
I dont want to display URL with lowercase like "slg" but just with uppercase like "SLG"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Can you provide some examples of where this is not working?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Can you provide some examples of where this is not working?
This runanywhere example shows it working
| makeresults
| eval url=split("abSLGcd,abslgcd,ab/SLG/cd,ab/slg/cd",",")
| mvexpand url
| eval kheo=case(like(url,"%SLG%"),"G")
