QRadar AQL Tutorial Part 5. Nested IF/ELSE and CASE statements

IF THE ElSE, NESTED and CASE Statement in AQL.
select QIDNAME(qid), sourceip, destinationip, "sc-status" from events where qid= 49750002 last 15 MINUTES

select QIDNAME(qid), sourceip, destinationip,
IF "sc-status" = '200' then 'OK'
else IF "sc-status" = '400' then 'Bad request'
else IF "sc-status" = '401' then 'Unauthorized'
else IF "sc-status" = '403' then 'Forbidden'
else IF "sc-status" = '404' then 'Not found'
else IF "sc-status" = '500' then 'Internal Server Error'
else IF "sc-status" = '10060' then 'A connection timed out'
else IF "sc-status" = '12234' then 'The traffic was blocked by IPS'
else IF "sc-status" = '12308' then 'The server is too busy to handle this request'
else "sc-status" As 'HTTP status' from events where qid= 49750002 last 59 MINUTES


select QIDNAME(qid), sourceip, destinationip,
IF "sc-status" = '200' then CONCAT("sc-status",'- OK')
else IF "sc-status" = '400' then CONCAT("sc-status",'- Bad request')
else IF "sc-status" = '401' then CONCAT("sc-status",'- Unauthorized')
else IF "sc-status" = '403' then CONCAT("sc-status",'- Forbidden')
else IF "sc-status" = '404' then CONCAT("sc-status",'- Not found')
else IF "sc-status" = '500' then CONCAT("sc-status",'- Internal Server Error')
else IF "sc-status" = '10060' then CONCAT("sc-status",'- A connection timed out')
else "sc-status" As 'HTTP status' from events where qid= 49750002 last 2 HOURS


select QIDNAME(qid), sourceip, destinationip,
CASE "sc-status"
when '200' then 'OK'
when '400' then 'Bad request'
when '401' then 'Unauthorized'
when '403' then 'Forbidden'
when '404' then 'Not found'
when '500' then 'Internal Server Error'
when '10060' then 'A connection timed out'
when '12234' then 'The traffic was blocked by IPS'
when '12308' then 'The server is too busy to handle this request'
else 'N/A' end As 'HTTP status' from events where qid= 49750002 last 2 HOURS