DevOps & Observability
DevOps, AppDev, and tool-chains, oh my!

Joining two searches based on one common filed

sumandevops
Engager

I have an issue, I have 2 separate searches 

1) Comes with Emp id and tempid

2) comes with Emp id 

 

I need to join 2 searches based on group by tempid

 

Thanks

 

 

Tags (1)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @sumandevops,

You can join to searches using join or stats command but group by field should be exists on both search results. In your case you can only join group by Empid. If you can provide your searches (anonymized) we can help better.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
0 Karma

sumandevops
Engager

@scelikok 

My bad I have a common empid in both searches, how can I do it

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...