https://community.splunk.com/t5/Splunk-Search/SQL-type-LEFT-JOIN/m-p/22781#M3965 <P>Check this out and see if this helps. </P> <P><A href="http://www.innovato.com/splunk/SQLSplunk.html" rel="nofollow">http://www.innovato.com/splunk/SQLSplunk.html</A></P> Fri, 30 Jul 2010 09:48:19 GMT dskillman 2010-07-30T09:48:19Z https://community.splunk.com/t5/Splunk-Search/SQL-type-LEFT-JOIN/m-p/22780#M3964 <P>Below are the two files <STRONG>tcodesNew.csv</STRONG> paste.plurk.com/show/284992 <STRONG>chlogNew.csv</STRONG> paste.plurk.com/show/284990</P> <P>I am trying to use left join and populate a result table where it shows me all the records from the tcodes file and common records from chlog file. In short Simulate SQL type left join.</P> Fri, 30 Jul 2010 08:37:12 GMT https://community.splunk.com/t5/Splunk-Search/SQL-type-LEFT-JOIN/m-p/22780#M3964 ankitghai 2010-07-30T08:37:12Z https://community.splunk.com/t5/Splunk-Search/SQL-type-LEFT-JOIN/m-p/22781#M3965 <P>Check this out and see if this helps. </P> <P><A href="http://www.innovato.com/splunk/SQLSplunk.html" rel="nofollow">http://www.innovato.com/splunk/SQLSplunk.html</A></P> Fri, 30 Jul 2010 09:48:19 GMT https://community.splunk.com/t5/Splunk-Search/SQL-type-LEFT-JOIN/m-p/22781#M3965 dskillman 2010-07-30T09:48:19Z