I have a query that output below, Status column is generated based on if condition.
|eval Status = if(Quantity>10,Good,BAD)
Output
Name Quantity Status
pen 20 Good
book 13 Good
riddle 2 Bad
note 60 Good
Is it possible to apply if or any other conditions to each row ? like if pen Quantity is more than 1 then say Good,
if book Quantity is less than 10 is Bad ?. In short, applying conditions to each row instead of applying at one column level.
Yes you can are case
if you are looking for applying conditions to each row
You can try something like
...|eval Status=case(Name="pen" AND Quantity>1,"Good",Name="book" AND Quantity<10,"Bad")
In this way you can add condition for other rows as well i.e. for riddle note and so on.
let me know if this helps!
Yes you can are case
if you are looking for applying conditions to each row
You can try something like
...|eval Status=case(Name="pen" AND Quantity>1,"Good",Name="book" AND Quantity<10,"Bad")
In this way you can add condition for other rows as well i.e. for riddle note and so on.
let me know if this helps!
That worked.. Thank you
You can try like:
...|eval Status=if (Name="pen" AND Quantity >1 ,"Good", "Bad")