Data Model Name Child Objects Property Values Property Values
datamodel1
childobject1 Description RequestID
record1 r1
record2 r2
record3 r3
childobject2 LogoutTime RequestID
10:00 PM r2
11:00 PM r3
Final output required as through search query not in data model RequesID Description LogoutTime
r1 record1
r2 record2 10:00 PM
r3 record3 11:00 PM
| datamodel
Above solution is verified and working.
Try this instead http://answers.splunk.com/answers/215346/best-practices-to-join-two-child-objects-of-a-data.html , it will be much faster