When I have this case statement like this, it "works". It runs and puts values in the iSeries column, but they are wrong.
| eval Platform=case((source="A" OR source="B" OR source="C") , "iSeries", true(),"Other")
When I add an AND to it so that it fulfills the true condition, no values are put in the iSeries column, and everything goes to Other.
| eval Platform=case((source="A" OR source="B" OR source="C") AND (dest=X OR dest=Y OR dest=Z), "iSeries", true(),"Other")
What am I doing wrong?
... View more