https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/528000#M89020 <P>I have a table with a join, which means there are 2 sources - x and y.&nbsp; I receive the logs from x first, I would like to load the information from source x&nbsp; in the table even if source y is still empty and then, load the information that is missing from y once I received the logs. Is it possible to be done?</P> Wed, 04 Nov 2020 18:52:38 GMT anonuser 2020-11-04T18:52:38Z https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/528000#M89020 <P>I have a table with a join, which means there are 2 sources - x and y.&nbsp; I receive the logs from x first, I would like to load the information from source x&nbsp; in the table even if source y is still empty and then, load the information that is missing from y once I received the logs. Is it possible to be done?</P> Wed, 04 Nov 2020 18:52:38 GMT https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/528000#M89020 anonuser 2020-11-04T18:52:38Z https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/528006#M89021 <P>Hi</P><P>This is the way how splunk is working. Just ingest data from different sources and combine those together with searches.<BR />r. Ismo</P> Wed, 04 Nov 2020 19:14:41 GMT https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/528006#M89021 isoutamo 2020-11-04T19:14:41Z https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/531338#M89389 <P>I reached out the result I wanted by using join type=left</P> Mon, 30 Nov 2020 14:56:59 GMT https://community.splunk.com/t5/Getting-Data-In/Real-time-table-load/m-p/531338#M89389 anonuser 2020-11-30T14:56:59Z