- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk SPL- How to the pass the users field values to the second event if the Ids and System values match?
super_saiyan
Communicator
05-03-2023
02:46 AM
URGENT
In the above screen print i have fields called Ids and System. In the 3rd event Ids represent the username and the 2nd event Ids value is equal to the System value.
I want to the pass the users field values to the second event if the Ids and System values match. How can i do it ?
Thanks in advance.
