in your props.conf: EXTRACT-ResponseTimeMS = (Response Time \[)(?<ResponseTimeMS>[0-9]*\.[0-9]*)(\]) in your query, maybe use a case statement: |eval ResponseSpeedType=case(ResponseTimeMS<10, "UnderTen", ResponseTimeMS>10, "OverTen", True(), "DefaultForEverythingElse") ... View more