$ 0 0 Hi All, I am new to splunk and facing an issue with assigning token value based on condition. I'm using the following code Image Overlay with iconshost="swaroops-MacBook-Pro.local" "Total Records processed" | stats count$earliest$$latest$$redlight_mod1.png$0case($result.count$>=1 ,"$greenlight_mod1.png$")$result.count$$ST_upstream_value My version of splunk is 6.2.14, and yes i did try after removing the $$ in greenlight_mod1.png as well. But the output i m getting is $ST_upstream_value$ and instead of image its showing as a ? mark in blue box. Looks like the lines after the condition match are not being executed. Can someone please tel me what is the error i m doing and if its the problem of version, do you know how i can achieve this with version 6.2.14. I would be really grateful, as i have spent almost 3 weeks stuck at this point. Thanks in advance.