Splunk Enterprise Security

AutoJoin / Concatenate: How to add data to a column without reference?

Miquell
New Member

Hi all,

I want to add rows to a column for which values have no direct relationship with any data (a forced join)

ex.

Customer 1             Sales 500
Customer 2             Sales 750
Customer 3             Sales 1000

Customer 4             Sales 0
Customer 5             Sales 0

My question is how can I add the rows from C4 & C5 to this column?
I know this is possible in example Qlik by using the concatenate function.

If anything is unclear please ask:)!

Thank you,

Miquell

0 Karma

cmerriman
Super Champion

what is your example data? I'm assuming the data above is your expected output?

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...