Dashboards & Visualizations

Nesting Searches in Advanced XML

tiberious726
Path Finder

Is it possible to use advanced xml to nest searches inside of oneanother? For example:

<module name="HiddenSearch">

<param name="search"> the first part of the search

<module name="Search">

<param name="search">the second part of the search

</module>

</module>


I would like to be able to search "the first part of the search|the second part of the search"

0 Karma
1 Solution

tiberious726
Path Finder

The answer is the "PostProcess" module

View solution in original post

0 Karma

tiberious726
Path Finder

The answer is the "PostProcess" module

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...