Reporting
Highlighted

Doing union of data model child objects

Explorer

Data Model Name Child Objects Property Values
datamodel1

childobject1 Description

record1
record2

                                 childobject2                          Description  
                                                                                                record3
                                                                                                record4

Final output required as through search query not in data model record1

record2

record3

record4

Tags (1)
0 Karma
Highlighted

Re: Doing union of data model child objects

Explorer

| set union [| datamodel search | fields + "field1" "field2"] [| datamodel search | fields + "field1" "field2"]

Above solution is verified and working.

0 Karma
Highlighted

Re: Doing union of data model child objects

SplunkTrust
SplunkTrust
0 Karma