<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Join three sources without common fields and assign one fields to other field in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322860#M93471</link>
    <description>&lt;PRE&gt;&lt;CODE&gt;Attached image ralted to tables and its relation .                      
Source 1 &amp;amp;source2 has common filed Trans_ID                     
IF Source1.SourceType=REF_ID then assign Source1.SourceType=REF_DESC                        
IF Source2.Trans_Type=REF_ID then assign Source2.Trans_Type=REF_DESC                        

                        ![alt text][1]
Final Result should be:                     

Trans_ID     SourceType Trans_Name  Trans_Type          
123 Type1   Name1   Type4           
345 Type3   Name3   Type2           
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Tue, 23 Jan 2018 07:43:05 GMT</pubDate>
    <dc:creator>Mounika1025</dc:creator>
    <dc:date>2018-01-23T07:43:05Z</dc:date>
    <item>
      <title>Join three sources without common fields and assign one fields to other field</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322858#M93469</link>
      <description>&lt;P&gt;I have three sources on same index ="test"&lt;/P&gt;

&lt;P&gt;source1                                source2                                                                                 RefSource2&lt;BR /&gt;&lt;BR /&gt;
Trans_ID SourceType   TRANS_ID Trans_Name Trans_Type                              REF_ID    REF_DESC&lt;BR /&gt;
123       01                       123       Name1      03                                                        01       Type1&lt;BR /&gt;
234       02                          345       Name4      04                                                      02       Type2&lt;BR /&gt;
345       03                          567       Name2      02                                                      03       Type3&lt;BR /&gt;
                                                                                                                                       04       Type4&lt;/P&gt;

&lt;P&gt;Result table should be &lt;/P&gt;

&lt;P&gt;Trans_ID  SourceType   Trans_Name  Trans_Type&lt;BR /&gt;
123         Type1          Name1    Type3&lt;BR /&gt;&lt;BR /&gt;
345         Type3          Name4    Type4          where Trans_id is common for source1and source2..&lt;/P&gt;

&lt;P&gt;Please help me how to achive above result &lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 17:46:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322858#M93469</guid>
      <dc:creator>Mounika1025</dc:creator>
      <dc:date>2020-09-29T17:46:01Z</dc:date>
    </item>
    <item>
      <title>Re: Join three sources without common fields and assign one fields to other field</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322859#M93470</link>
      <description>&lt;P&gt;Can you post which source have what fields and (if any) relationship between those fields?&lt;/P&gt;</description>
      <pubDate>Mon, 22 Jan 2018 20:41:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322859#M93470</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2018-01-22T20:41:41Z</dc:date>
    </item>
    <item>
      <title>Re: Join three sources without common fields and assign one fields to other field</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322860#M93471</link>
      <description>&lt;PRE&gt;&lt;CODE&gt;Attached image ralted to tables and its relation .                      
Source 1 &amp;amp;source2 has common filed Trans_ID                     
IF Source1.SourceType=REF_ID then assign Source1.SourceType=REF_DESC                        
IF Source2.Trans_Type=REF_ID then assign Source2.Trans_Type=REF_DESC                        

                        ![alt text][1]
Final Result should be:                     

Trans_ID     SourceType Trans_Name  Trans_Type          
123 Type1   Name1   Type4           
345 Type3   Name3   Type2           
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 23 Jan 2018 07:43:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Join-three-sources-without-common-fields-and-assign-one-fields/m-p/322860#M93471</guid>
      <dc:creator>Mounika1025</dc:creator>
      <dc:date>2018-01-23T07:43:05Z</dc:date>
    </item>
  </channel>
</rss>

