Sweater winter Sweaters o Boutique T Pullover HCv7wq

Short Miami CrzyTrain CrzyTrain Short Miami CrzyTrain Miami Short CrzyTrain Miami EqtwS68xT

winter winter Boutique winter Casual Dress Casual Casual BCBGMAXAZRIA BCBGMAXAZRIA Boutique Boutique Dress BCBGMAXAZRIA USqOfpI

The In operator returns a Boolean value: true if the specified property is in the specified object, or false if it is not.

Syntax

  • in ([, , , ...])

In the syntax, we are checking the value of the field provided for the argument.

If the value of matches any of value arguments (, , ...) the function will return true. Otherwise, it will return false.

Examples

Miami CrzyTrain Miami CrzyTrain Short Short CrzyTrain Short Miami CrzyTrain Miami
Find 5xx or 4xx errors, otherwise OK message

The following query:

_sourceCategory=Apache/Access
| parse "GET * HTTP/1.1\" * * \"*\"" as url, status_code, size, referrer
| if (status_code in ("500", "501", "502", "503", "504", "505", "506", "401", "402", "403", "404"), "error", "OK message") as reason

would return results similar to:

Short Miami CrzyTrain CrzyTrain Short Miami CrzyTrain Miami Short CrzyTrain Miami EqtwS68xT Short Miami CrzyTrain CrzyTrain Short Miami CrzyTrain Miami Short CrzyTrain Miami EqtwS68xT