Dashboards & Visualizations

selfjoin examples?

myudkowsky
Communicator

Where can I find some examples of how selfjoin works -- input and output? I find this particular search command to be spectacularly under-explained.

Tags (1)

cphair
Builder

I haven't seen much about it in Splunk, but it looks like the standard SQL self-join, which is described in many blog posts. It's useful if you have a table with field values that refer to other keys in the same table. One example: http://www.sqltutorial.org/sqlselfjoin.aspx.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...