search error message...where wrong?

[khyoung7410]

my search | eval status_230=case(status < "400", "ok") | ~

• error message - Encountered the following error while trying to update: In handler 'views': Not valid XML:

Where wrong?

[Ayn]

When you're using "<" in a search command within an XML document, that tag character is interpreted as part of the XML data rather than as part of the search command. To specify that this tag is not referring to the XML structure, use the special escaping sequence <![CDATA[ and its corresponding end sequence ]]>.

See this question and corresponding for more details: http://splunk-base.splunk.com/answers/30157/inputlookup-in-view-with-rex