topic Re: Doing join of data model child objects in Reporting https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140901#M3145 <P>| datamodel <OBJECT> search | fields + "field1" "field2" join type=left field1 [| datamodel <OBJECT> search | fields + "field1"] | fields + "field1" "field2"</OBJECT></OBJECT></P> <P>Above solution is verified and working.<BR /> </P> Fri, 24 Apr 2015 04:36:18 GMT kamalm1 2015-04-24T04:36:18Z Doing join of data model child objects https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140900#M3144 <P>Data Model Name Child Objects Property Values Property Values<BR /> datamodel1<BR /><BR /> childobject1 Description RequestID<BR /><BR /> record1 r1<BR /> record2 r2<BR /> record3 r3</P> <PRE><CODE>childobject2 LogoutTime RequestID 10:00 PM r2 11:00 PM r3 </CODE></PRE> <P>Final output required as through search query not in data model RequesID Description LogoutTime<BR /><BR /> r1 record1<BR /><BR /> r2 record2 10:00 PM<BR /><BR /> r3 record3 11:00 PM </P> Fri, 10 Apr 2015 14:58:30 GMT https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140900#M3144 kamalm1 2015-04-10T14:58:30Z Re: Doing join of data model child objects https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140901#M3145 <P>| datamodel <OBJECT> search | fields + "field1" "field2" join type=left field1 [| datamodel <OBJECT> search | fields + "field1"] | fields + "field1" "field2"</OBJECT></OBJECT></P> <P>Above solution is verified and working.<BR /> </P> Fri, 24 Apr 2015 04:36:18 GMT https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140901#M3145 kamalm1 2015-04-24T04:36:18Z Re: Doing join of data model child objects https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140902#M3146 <P>Try this instead <A href="http://answers.splunk.com/answers/215346/best-practices-to-join-two-child-objects-of-a-data.html">http://answers.splunk.com/answers/215346/best-practices-to-join-two-child-objects-of-a-data.html</A> , it will be much faster </P> Fri, 24 Apr 2015 05:55:48 GMT https://community.splunk.com/t5/Reporting/Doing-join-of-data-model-child-objects/m-p/140902#M3146 MuS 2015-04-24T05:55:48Z