<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Highlighting data in one table that is contained in a separate table? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599781#M49215</link>
    <description>&lt;P&gt;Hi, rather new to this community, but trying to figure this out.&amp;nbsp; I have table 1 with two fields, (src_ip and dest_ip) and another table 2 with (IP) field.&amp;nbsp; I would like to highlight any IPs in table 2 that are a match to any in table 1 in either field.&amp;nbsp; Is there an easy way to accomplish this?&amp;nbsp; Thanks in advance.&lt;/P&gt;</description>
    <pubDate>Tue, 31 May 2022 00:20:10 GMT</pubDate>
    <dc:creator>mjande5</dc:creator>
    <dc:date>2022-05-31T00:20:10Z</dc:date>
    <item>
      <title>Highlighting data in one table that is contained in a separate table?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599781#M49215</link>
      <description>&lt;P&gt;Hi, rather new to this community, but trying to figure this out.&amp;nbsp; I have table 1 with two fields, (src_ip and dest_ip) and another table 2 with (IP) field.&amp;nbsp; I would like to highlight any IPs in table 2 that are a match to any in table 1 in either field.&amp;nbsp; Is there an easy way to accomplish this?&amp;nbsp; Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Tue, 31 May 2022 00:20:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599781#M49215</guid>
      <dc:creator>mjande5</dc:creator>
      <dc:date>2022-05-31T00:20:10Z</dc:date>
    </item>
    <item>
      <title>Re: Highlighting data in one table that is contained in a separate table?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599806#M49217</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246315"&gt;@mjande5&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;if the results in the second table are less than 50,000, you can use a search like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index=index1 ([ search index=index2 | rename IP AS src_ip | fields src_ip ] OR [ search index=index2 | rename IP AS dest_ip | fields dest_ip ])
| table _time src_ip dest_ip&lt;/LI-CODE&gt;&lt;P&gt;If they are more than 50,000 you need a different solution.&lt;/P&gt;&lt;P&gt;Let me know.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 31 May 2022 06:54:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599806#M49217</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-05-31T06:54:26Z</dc:date>
    </item>
    <item>
      <title>Re: Highlighting data in one table that is contained in a separate table?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599815#M49218</link>
      <description>&lt;P&gt;Since you're asking in the "Dashboards &amp;amp; Visualizations" section - do you mean that you have two separate table widgets on the same&amp;nbsp; dashboard? Or do you simply want to do a "match" for two given searches.&lt;/P&gt;</description>
      <pubDate>Tue, 31 May 2022 07:14:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599815#M49218</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2022-05-31T07:14:57Z</dc:date>
    </item>
    <item>
      <title>Re: Highlighting data in one table that is contained in a separate table?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599869#M49219</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/231884"&gt;@PickleRick&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Sorry, I should have been more clear.&amp;nbsp; I have two separate dashboards that query differing information.&amp;nbsp; One has src_ip and dest_ip columns and the other dashboard has an IP column.&amp;nbsp; I would like to have any IPs in either the src_ip or dest_ip columns to highlight or some way stand out if they match the IPs in the other dashboard with the IP column.&amp;nbsp; I hope this helps clear up what I am trying to do.&lt;/P&gt;&lt;P&gt;-Mike&lt;/P&gt;</description>
      <pubDate>Tue, 31 May 2022 10:39:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Highlighting-data-in-one-table-that-is-contained-in-a-separate/m-p/599869#M49219</guid>
      <dc:creator>mjande5</dc:creator>
      <dc:date>2022-05-31T10:39:05Z</dc:date>
    </item>
  </channel>
</rss>

