Splunk Search

Can you help me check multiple conditions in Splunk?

darshana2511
New Member

I have to check multiple conditions like if Auth = "PASS" and Basc = "PASS" and RReg = "PASS" then result ="PASS" else if anyone one of the condition as Fail then result = "Fail". How can I check this condition in splunk.

0 Karma

renjith_nair
Legend

@darshana2511,

Did you try this and what's missing from that?

eval result=if(Auth="PASS" AND Basc="PASS" AND RReg="PASS","PASS","Fail")
---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...