Splunk Enterprise Security

AutoJoin / Concatenate: How to add data to a column without reference?

Miquell
New Member

Hi all,

I want to add rows to a column for which values have no direct relationship with any data (a forced join)

ex.

Customer 1             Sales 500
Customer 2             Sales 750
Customer 3             Sales 1000

Customer 4             Sales 0
Customer 5             Sales 0

My question is how can I add the rows from C4 & C5 to this column?
I know this is possible in example Qlik by using the concatenate function.

If anything is unclear please ask:)!

Thank you,

Miquell

0 Karma

cmerriman
Super Champion

what is your example data? I'm assuming the data above is your expected output?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...