Hello all, I need help with this :(( How to use derivatives of 1st function results into the 2nd function in splunk? Please see the example below: 1st function: for instance, from the first eval, i got the names of the top 100 sold fruits and their respective companies. 2nd function: From this top 100 fruits, I would like to then, search for the fruits import-export countries (ie the export country (origin) and imported (destination) country). Each of the fruits may have more than 1 set of export-import. How do I go about doing it? What's the syntax to get the top 100 fruits into the second function? Any guidance appreciated ... View more

I would like to write in splunk a nested if loop: What I want to achieve: if buyer_from_France:                     do eval percentage_fruits                    if percentage_fruits> 10:                                                          do summation                                                          if summation>20:                                                                                           total_price                                                                                            if total_price>$50:                                                                                                                       do(trigger bonus coupon) My current code (that works): > | eventstats sum(buyers_fruits) AS total_buyers_fruits by location > | stats sum(fruits) as buyers_fruits by location buyers > | eval percentage_fruits=fruits_bought/fruits_sold > | table fruits_bought fruits_sold buyers > | where percentage_fruits > 10 > | sort - percentage_fruits How do I complete the syntax/expression for the 2nd (summation) and consequently, 3rd (total price), 4th if-loop (trigger)? ... View more