https://community.splunk.com/t5/Dashboards-Visualizations/selfjoin-examples/m-p/67475#M3580 <P>Where can I find some examples of how selfjoin works -- input and output? I find this particular search command to be spectacularly under-explained.</P> Fri, 21 Sep 2012 21:01:30 GMT myudkowsky 2012-09-21T21:01:30Z https://community.splunk.com/t5/Dashboards-Visualizations/selfjoin-examples/m-p/67475#M3580 <P>Where can I find some examples of how selfjoin works -- input and output? I find this particular search command to be spectacularly under-explained.</P> Fri, 21 Sep 2012 21:01:30 GMT https://community.splunk.com/t5/Dashboards-Visualizations/selfjoin-examples/m-p/67475#M3580 myudkowsky 2012-09-21T21:01:30Z https://community.splunk.com/t5/Dashboards-Visualizations/selfjoin-examples/m-p/67476#M3581 <P>I haven't seen much about it in Splunk, but it looks like the standard SQL self-join, which is described in many blog posts. It's useful if you have a table with field values that refer to other keys in the same table. One example: <A href="http://www.sqltutorial.org/sqlselfjoin.aspx">http://www.sqltutorial.org/sqlselfjoin.aspx</A>.</P> Tue, 02 Oct 2012 19:03:06 GMT https://community.splunk.com/t5/Dashboards-Visualizations/selfjoin-examples/m-p/67476#M3581 cphair 2012-10-02T19:03:06Z