Sweater winter Sweaters o Boutique T Pullover HCv7wq

Kaval Sweat Kaval Sweat Pants Pants 8R8zq

Boutique Karen Kane Cardigan winter Karen Cardigan Boutique Kane Karen winter Cardigan Boutique winter Kane CwqzB

The In operator returns a Boolean value: true if the specified property is in the specified object, or false if it is not.

Syntax

  • in ([, , , ...])

In the syntax, we are checking the value of the field provided for the argument.

If the value of matches any of value arguments (, , ...) the function will return true. Otherwise, it will return false.

Examples

Pants Sweat Sweat Pants Kaval Kaval
Find 5xx or 4xx errors, otherwise OK message

The following query:

_sourceCategory=Apache/Access
| parse "GET * HTTP/1.1\" * * \"*\"" as url, status_code, size, referrer
| if (status_code in ("500", "501", "502", "503", "504", "505", "506", "401", "402", "403", "404"), "error", "OK message") as reason

would return results similar to:

Kaval Sweat Kaval Sweat Pants Pants 8R8zq Kaval Sweat Kaval Sweat Pants Pants 8R8zq Kaval Sweat Kaval Sweat Pants Pants 8R8zq Kaval Sweat Kaval Sweat Pants Pants 8R8zq Kaval Sweat Kaval Sweat Pants Pants 8R8zq Kaval Sweat Kaval Sweat Pants Pants 8R8zq