https://community.splunk.com/t5/Splunk-Search/correlate-uses-and-samples/m-p/102746#M26555 <H2>It is inferred from the result of sampling.</H2> <P>NO col1 col2 col3<BR /> 1 A X Y<BR /> 2 B<BR /><BR /> 3 C X<BR /> 4 D </P> <H2>5 E </H2> <PRE><CODE> col1 col2 col3 </CODE></PRE> <P>col1 100%(5/5) 40%(2/5) 20%(1/5) <BR /> col2 40%(2/5) 100%(2/2) 50%(1/2)</P> <H2>col3 20%(1/5) 50%(1/2) 100%(1/1)</H2> Thu, 25 Jul 2013 16:39:15 GMT HiroshiSatoh 2013-07-25T16:39:15Z https://community.splunk.com/t5/Splunk-Search/correlate-uses-and-samples/m-p/102745#M26554 <P>Hi All,</P> <P>Am trying to find the usage of correlation. When i try my search using coorelation, it gives me an output, but am unable to understand the result.</P> <P>index="citicom" alerts|correlate email, application</P> <P>result gives as <BR /> Rowfield email APPLICATION<BR /> email 1.00 1.00<BR /> application 1.00 1.00</P> <P>can anyone explain me the coorelation with some simple example?</P> Mon, 22 Jul 2013 16:28:25 GMT https://community.splunk.com/t5/Splunk-Search/correlate-uses-and-samples/m-p/102745#M26554 Paul_tcs 2013-07-22T16:28:25Z https://community.splunk.com/t5/Splunk-Search/correlate-uses-and-samples/m-p/102746#M26555 <H2>It is inferred from the result of sampling.</H2> <P>NO col1 col2 col3<BR /> 1 A X Y<BR /> 2 B<BR /><BR /> 3 C X<BR /> 4 D </P> <H2>5 E </H2> <PRE><CODE> col1 col2 col3 </CODE></PRE> <P>col1 100%(5/5) 40%(2/5) 20%(1/5) <BR /> col2 40%(2/5) 100%(2/2) 50%(1/2)</P> <H2>col3 20%(1/5) 50%(1/2) 100%(1/1)</H2> Thu, 25 Jul 2013 16:39:15 GMT https://community.splunk.com/t5/Splunk-Search/correlate-uses-and-samples/m-p/102746#M26555 HiroshiSatoh 2013-07-25T16:39:15Z