Hello, 😊 i'm new on splunk and i want to know the best way to accomplish the following task IINFORMATION INPUT : i have DATA in xml format in the event  the value of ID can be between 1 and 500 in the event there is at least 15 ProductX  (it's can be ProductA, ProductB, ProductC, ... ,ProductZ) ProductX can be use for 300 differents ID     <EventData> <Data Name="ID">5</Data> <Data Name="ProductA">Screw 16</Data> <Data Name="ProductB">Screw 11 </Data> <Data Name="ProductC">Screw G</Data> <Data Name="ProductD">Screw 9</Data> ... ... </EventData>     GOAL : i want dynamically parse a field called "Result" which depends of the ID which is in the event EXAMPLE : if ID = 5 i want that my field "Result" is egal to the value of productB. (Result = Screw11) if ID = 6 i want that my field "Result" is egal to the value of productD. (Result = Screw9) if ID = 240 i want that my field "Result" is egal to the value of productB. (Result = Screw11) if ID = 499 i want that my field "Result" is egal to the value of productB. (Result = Screw11) and so on.. i try to do the parsing with prop.conf file and trabsforms.conf with INGEST_EVAL and IF and OR but no joy.. any solutions / advices for saving performances / best way to do this please? Thx !! 😘     ... View more