hdt | Humaaans design tool | User Interface library

Another way is create a map of key, value pair. Find DemoName in all keys. If DemoName is key then execute value function.

I get the impression, perhaps wrongly, that you believe the rex command will search all events concurrently. That is not the next. Splunk processes each event individually and independently. The query must be prepared to find any of the target strings in any event.

Before starting templating things, you should think of a clear interface!

What is the sense to have a class hierarchy with more or less totally different data types inside which have NO common interface?

At the point where you manually have to cast something, you have a clear indication that your design is broken. The information has to be inside the class and not in the code which needs to cast before access a object. I believe you do not need any cast if you have cleaned up your interface!

In your example above, it seems to be a start point to define a interface which makes your data accessible to other parts of your code like:

You forgot to include the opening tag in your code. But I guess that's a copy & paste error ;)

To resolve your actual problem, simply change: