Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fdataprime%2Flanguage-reference%2Ffunctions-reference%2Fcases%2Fcase_equals.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fdataprime%2Flanguage-reference%2Ffunctions-reference%2Fcases%2Fcase_equals.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

# `case_equals`

## Description

Returns a value based on whether an expression equals one of several specified values.

This function is a shorthand for `case` expressions with equality (`==`) logic and helps shorten queries that would otherwise repeat conditional statements. If no clause matches and no `_` fallback is present, `case_equals` returns `null`.

Note

`case_equals` checks clauses top-to-bottom and returns the **first match**, so order matters.

## Syntax

```
case_equals {

e: any,

value1 -> result1,

value2 -> result2,

...

valueN -> resultN,

_      -> default

}
```

## Arguments

| Name     | Type  | Required  | Description                               |
| -------- | ----- | --------- | ----------------------------------------- |
| `e`      | `any` | **true**  | The expression to compare against values  |
| `value`  | `any` | **true**  | A value to compare with `e`               |
| `result` | `any` | **true**  | The value to return if `e` equals `value` |
| `_`      | `any` | **false** | Default value if no values match          |

## Example

**Use case: Flag environments for alerting**

Suppose you want to create a field `should_alert` that is `true` for environments where alerts should fire and `false` otherwise. Consider these log documents:

### Example data

```
{

  "cluster_name": "acme-prod-cluster"

},

{

  "cluster_name": "acme-dev-cluster"

},

{

  "cluster_name": "acme-stg-cluster"

}
```

### Example query

```
create should_alert from 

  case_equals {

    $d.cluster_name,

    'acme-prod-cluster' -> true,

    'acme-dev-cluster'  -> false,

    'acme-stg-cluster'  -> true,

    _                   -> false

  }
```

### Example output

```
{

  "cluster_name": "acme-prod-cluster",

  "should_alert": true

},

{

  "cluster_name": "acme-dev-cluster",

  "should_alert": false

},

{

  "cluster_name": "acme-stg-cluster",

  "should_alert": true

}
```