Can I only use or statements in a custom column? I am wanting to collapse some of the many columns that I have so. One example is for DNS, I'd like to display dns.flags.response if it is a query otherwise display dns.flags.rcode. The problem that I run into with or statement is that for DNS both the request and the reply have a dns.flags.response.
So instead of just using an or statement, can I use other operators?