https://community.splunk.com/t5/Getting-Data-In/How-to-search-events-in-two-sources-using-timestamp/m-p/323261#M60205 <P>You will get a time stamp of 80-100 degrees by sub search.</P> <PRE><CODE>(your search speed log) [search (your search temperature log) degrees&gt;=80 degrees&lt;=100 |stats earliest(_time) as earliest,latest(_time) as latest|eval latest=latest+1 | format "(" "(" "" ")" "OR" ")"] </CODE></PRE> <P>Be expanded<BR /> (your search speed log) earliest=xxxx latest=xxxx</P> Thu, 07 Dec 2017 01:45:37 GMT HiroshiSatoh 2017-12-07T01:45:37Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-events-in-two-sources-using-timestamp/m-p/323260#M60204 <P>Hi Guys, Im wanted to search certain events that may happened during certain timestamps.</P> <P>Example I have the timestamp and the speed of this vehicule in one source and in the other i have the oil temperature of this vehicule and also the timestamp, how can I want to search the temperature of the oil between 80-100 degrees?</P> <P>is this possible?</P> <P>Thanks,</P> Wed, 06 Dec 2017 23:02:21 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-events-in-two-sources-using-timestamp/m-p/323260#M60204 rahumadad 2017-12-06T23:02:21Z https://community.splunk.com/t5/Getting-Data-In/How-to-search-events-in-two-sources-using-timestamp/m-p/323261#M60205 <P>You will get a time stamp of 80-100 degrees by sub search.</P> <PRE><CODE>(your search speed log) [search (your search temperature log) degrees&gt;=80 degrees&lt;=100 |stats earliest(_time) as earliest,latest(_time) as latest|eval latest=latest+1 | format "(" "(" "" ")" "OR" ")"] </CODE></PRE> <P>Be expanded<BR /> (your search speed log) earliest=xxxx latest=xxxx</P> Thu, 07 Dec 2017 01:45:37 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-search-events-in-two-sources-using-timestamp/m-p/323261#M60205 HiroshiSatoh 2017-12-07T01:45:37Z