Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Change value of field at index time based on condition

$
0
0
Hi, I am wondering if its possible t change value of field based on condition at **index time**. For example: If the log contains field X with value XX, then in case field Y exists, change Y value to YY. Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>