topic Joing data from 2 data in Splunk Search

Joing data from 2 data

SplunkBaby — Fri, 07 Feb 2014 05:41:08 GMT

I want to join data from DB with an csv file data.
both DB and csv file have a common column which can be used for joining.
How can i achieve this?

Thanks

Ayn — Fri, 07 Feb 2014 07:00:52 GMT

Where exactly are you running into problems? I guess you found the "join" command but ran into some kind of issues with it?

SplunkBaby — Fri, 07 Feb 2014 07:03:20 GMT

I have only loaded 2 data source.I dont know how to join this.
Give me some tutorial links or description to join this.

Ayn — Fri, 07 Feb 2014 07:05:26 GMT

First of all it sounds like you need to take the Splunk tutorial (http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial ). It equips you with the knowledge you need for knowing where to look for solutions. Secondly, the join command docs are here: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Join