<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to combine tables with identical fields? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594096#M206776</link>
    <description>&lt;P&gt;Hi Splunk Community,&lt;/P&gt;
&lt;P&gt;I have 2 tables I am attempting to merge together. Both tables are in csvs that I am trying to pull from. Does anyone know the command so that the data from the second table gets added to the bottom of the first?&lt;/P&gt;
&lt;P&gt;table 1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;table 2&lt;/P&gt;
&lt;P&gt;a1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; d4&amp;nbsp;&lt;/P&gt;
&lt;P&gt;b1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; e5&lt;/P&gt;
&lt;P&gt;c3&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;f6&lt;/P&gt;
&lt;P&gt;Combined&lt;/P&gt;
&lt;P&gt;a1&lt;/P&gt;
&lt;P&gt;b2&lt;/P&gt;
&lt;P&gt;c3&lt;/P&gt;
&lt;P&gt;d4&lt;/P&gt;
&lt;P&gt;e5&lt;/P&gt;
&lt;P&gt;f6&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 18 Apr 2022 18:18:56 GMT</pubDate>
    <dc:creator>jpfrancetic</dc:creator>
    <dc:date>2022-04-18T18:18:56Z</dc:date>
    <item>
      <title>How to combine tables with identical fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594096#M206776</link>
      <description>&lt;P&gt;Hi Splunk Community,&lt;/P&gt;
&lt;P&gt;I have 2 tables I am attempting to merge together. Both tables are in csvs that I am trying to pull from. Does anyone know the command so that the data from the second table gets added to the bottom of the first?&lt;/P&gt;
&lt;P&gt;table 1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;table 2&lt;/P&gt;
&lt;P&gt;a1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; d4&amp;nbsp;&lt;/P&gt;
&lt;P&gt;b1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; e5&lt;/P&gt;
&lt;P&gt;c3&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;f6&lt;/P&gt;
&lt;P&gt;Combined&lt;/P&gt;
&lt;P&gt;a1&lt;/P&gt;
&lt;P&gt;b2&lt;/P&gt;
&lt;P&gt;c3&lt;/P&gt;
&lt;P&gt;d4&lt;/P&gt;
&lt;P&gt;e5&lt;/P&gt;
&lt;P&gt;f6&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 18 Apr 2022 18:18:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594096#M206776</guid>
      <dc:creator>jpfrancetic</dc:creator>
      <dc:date>2022-04-18T18:18:56Z</dc:date>
    </item>
    <item>
      <title>Re: Combine Tables with Identical Fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594098#M206777</link>
      <description>&lt;LI-CODE lang="markup"&gt;| inputlookup table1.csv
| append [|inputlookup table2.csv]&lt;/LI-CODE&gt;</description>
      <pubDate>Mon, 18 Apr 2022 16:18:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594098#M206777</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-04-18T16:18:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to Combine Tables with Identical Fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594111#M206780</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/243581"&gt;@jpfrancetic&lt;/a&gt;&amp;nbsp;- Try the below search:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| inputlookup table1.csv
| inputlookup append=true table2.csv&lt;/LI-CODE&gt;</description>
      <pubDate>Mon, 18 Apr 2022 17:04:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-combine-tables-with-identical-fields/m-p/594111#M206780</guid>
      <dc:creator>VatsalJagani</dc:creator>
      <dc:date>2022-04-18T17:04:28Z</dc:date>
    </item>
  </channel>
</rss>

