Hello  I'm trying to figure out How can I use kinda if...else condition in my Splunk query. I've set up two metrics, which are sending data to Splunk. Each matrix have different index value.  For Example: For Matrix A the index is "index=aData" and for Metric B index is "index=bData". Currently in Splunk I'm seeing duplicate data because both metrics are sending same value. So what I'm trying to achieve is:  1. First look for data if coming from "index=aData" 2. If able to see data from index "aData" show me the results  3. else check the data from "bData" (Not looking for "OR " condition)  Results should show the data only from 1 index to avoid duplicity.    ... View more