joining two values on single value

[sompalle1]

Hi,

i have Total with me, (Table A)

Name            Total

a                      1000

b                       1600

c                       2500

Table B
From          To              Stage

0                  1000          Excellent

1000          1500          Good

1500          2000         Poor

i need to join Total with From & To in order to get Stage.

Thanks.

[sompalle1]

thanks for reply

nope not working

[manjunathmeti]

Share your search query.

[manjunathmeti]

You can use the map command to run the TableB search query for each Total value in TableA.

index=s1 | table Name, Total | map search="search index=s2 From <= $Total$ AND To <= $Total$" | eval Total=$Total$, Name=$Name$ | fields Name, Total, Stage"

If this reply helps you, an upvote/like would be appreciated.