I am having one field and it has 2 values. Comparing them with each other I want to generate a message whether "Success" or "Failure".
Below are details:
// Search
| table _time, ErrorCount | sort 2 _time
It gives me result like
_time ErrorCount
2-Jan-20 16:35:00 10
2-Jan-20 16:34:00 14
I want to show "Success" if ErrorCount at latestTime < ErrorCount at earliestTime and failure if its otherwise.
↧