I came across this answer with a similar situation to solve. Situation: I created a dropdown with different deployment environments as values, source code like below: <input type="dropdown" token="deploy_env" searchWhenChanged="true"> <label>Deployment Environment</label> <choice value="nonprod">Non Production</choice> <choice value="prod">Production</choice> <default>nonprod</default> </input> I need to query below, namely to have space_name and app_name value depend on $delpy_env$: index=$deploy_env$ org_name="my_org_name" space_name="spacename_based_on_$deploy_env$" app_name="appname_based_on_$deploy_env$" message_type=OUT | search "Qr Pdf sent to" | stats count Based on answers from this topic, I came up with below solution: index=$deploy_env$org_name="my_org_name" message_type=OUT | eval space_name=case("$deploy_env$" == "nonprod", "spacename-dev", "$deploy_env$" == "spacename-prod", "prod") | eval app_name=case("$deploy_env$" == "nonprod", "serviceappname-dev", "$deploy_env$" == "prod", "serviceappname-prod") | search "Qr Pdf sent to" | stats Count Could anyone check if the solution is correct please and if there are better ways to solve this issue? Thank you.
... View more