Dashboards & Visualizations

Nesting Searches in Advanced XML

tiberious726
Path Finder

Is it possible to use advanced xml to nest searches inside of oneanother? For example:

<module name="HiddenSearch">

<param name="search"> the first part of the search

<module name="Search">

<param name="search">the second part of the search

</module>

</module>


I would like to be able to search "the first part of the search|the second part of the search"

0 Karma
1 Solution

tiberious726
Path Finder

The answer is the "PostProcess" module

View solution in original post

0 Karma

tiberious726
Path Finder

The answer is the "PostProcess" module

0 Karma
Get Updates on the Splunk Community!

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

If you want to gain full control over your growing data volumes, check out Splunk’s Data Management pipeline ...

Out of the Box to Up And Running - Streamlined Observability for Your Cloud ...

  Tech Talk Streamlined Observability for Your Cloud Environment Register    Out of the Box to Up And Running ...

Splunk Smartness with Brandon Sternfield | Episode 3

Hello and welcome to another episode of "Splunk Smartness," the interview series where we explore the power of ...