Hi All,
index="deneme_index6" | spath output=QueryName path="CxXMLResults.Query{@name}" | mvexpand QueryName | table QueryName | map search="search index='deneme_index6' CxXMLReports.Query{@name}=$QueryName$ | table CxXMLReports.Query{@name}"
Just I'm making examples, There is not specific reason of above operation, I just try to understand. Why I'm getting error like "No results found."
@rasty, I have provided another answer with Run Anywhere Example for your previous question: https://answers.splunk.com/answers/642422/xml-nested-field-issues.html
Can you please try out and confirm? Also since this question is on similar lines to your previous question, please confirm whether we can close this one.
@rasty, I have provided another answer with Run Anywhere Example for your previous question: https://answers.splunk.com/answers/642422/xml-nested-field-issues.html
Can you please try out and confirm? Also since this question is on similar lines to your previous question, please confirm whether we can close this one.
We solved my problem with @niketnilay in https://answers.splunk.com/answers/642422/xml-nested-field-issues.html
Could you please try this query
index="deneme_index6" | spath output=QueryName path="CxXMLResults.Query{@name}" | mvexpand QueryName | table QueryName | map search="search index='deneme_index6' CxXMLReports.Query{@name}=$QueryName$ | table CxXMLReports.Query{@name}" maxsearches=10