topic Re: how to display common results from two index in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273362#M3430 <P>index=abc [search index=xyz | dedup ID Type | fields ID Type]</P> <P>also</P> <P>index=abc | join type=inner max=0 ID Type [search index=xyz]</P> Thu, 26 May 2016 11:54:24 GMT jkat54 2016-05-26T11:54:24Z how to display common results from two index https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273361#M3429 <P>Hi,<BR /> i have 2 indexes <BR /> index=abc &amp; index=xyz</P> <P>Index abc has following values</P> <P>ID.......Type Name class Address <BR /> 001....A.......Tejas....12A...India<BR /> 002....A.......Jhon.....11A...USA<BR /> 003....B.......Tom......11A...UK<BR /> 004....C.......Ram......12B...India<BR /> 004....A.......Ron......12B...UAE</P> <P>Index XYZ has following values</P> <P>ID.......Type Name class Address <BR /> 001....A.......Tejas....12A...India<BR /> 002....A.......Jhon.....11A...USA<BR /> 004....D.......Ram......12B...India<BR /> 004....A.......Ron......12B...UAE</P> <P>It should return result where exact match found in both index for ID <STRONG>AND</STRONG> Type</P> <P>Desired result</P> <P><STRONG>001</STRONG>....<STRONG>A</STRONG>.......Tejas....12A...India<BR /> <STRONG>002</STRONG>....<STRONG>A</STRONG>.......Jhon.....11A...USA<BR /> <STRONG>004</STRONG>....<STRONG>A</STRONG>.......Ron......12B...UAE</P> <P>Thank you</P> Thu, 26 May 2016 10:15:23 GMT https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273361#M3429 tp92222 2016-05-26T10:15:23Z Re: how to display common results from two index https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273362#M3430 <P>index=abc [search index=xyz | dedup ID Type | fields ID Type]</P> <P>also</P> <P>index=abc | join type=inner max=0 ID Type [search index=xyz]</P> Thu, 26 May 2016 11:54:24 GMT https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273362#M3430 jkat54 2016-05-26T11:54:24Z Re: how to display common results from two index https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273363#M3431 <P>Thanks for help</P> Thu, 26 May 2016 12:30:53 GMT https://community.splunk.com/t5/Splunk-Dev/how-to-display-common-results-from-two-index/m-p/273363#M3431 tp92222 2016-05-26T12:30:53Z