Hi, I am using multiple case conditions but the condition is not matching. In the third line of the code used AND condition for message=*End of GL* AND tracepoint=*Exception* .If the condition match...
See more...
Hi, I am using multiple case conditions but the condition is not matching. In the third line of the code used AND condition for message=*End of GL* AND tracepoint=*Exception* .If the condition match make to success.In my case its showing both SUCCESS and ERROR in the table. | eval Status=case(
like('Status' ,"%SUCCESS%") ,"SUCCESS",
like('message' ,"%End of GL-import flow%") AND like('tracePoint',"%EXCEPTION%") ,"SUCCESS",
like('tracePoint',"%EXCEPTION%") AND like('priority' ,"%ERROR%"),"ERROR",
like('Status',"%ERROR%"),"ERROR",
like('priority',"%WARN%"),"WARN",
like('priority',"GLImport Job Already Running, Please wait for the job to complete%"),"WARN",
like('message',"%End of GL Import process - No files found for import to ISG%"), "ERROR", 1==1, "")