Reporting

Join two reports

priya0709
Path Finder

I need help to join two of my reports 

1St report fetches host name with Event code 52 and in time picker this report runs for 24 hrs

2nd report fetches host name with Event code 52 and count of host name which are been repeated in last 30 days

I want to join both reports based on host name 

2nd report running for 30 days should match host name running for last 24 hours and give the count also for how many days dat particular host is getti g repeated with Event code 52

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Can you share your current queries?

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Can you share your current queries?

priya0709
Path Finder

Yes, I was able to join the 2 queries. Please see attached query

IMG_20201003_124253.jpg

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...