Can we combine data from different Apps?

xvxt006 · ‎10-17-2013

Hi,

jtrucks · ‎10-17-2013

You can do searches that cross any index, sourcetype, and source, so yes. You might have to force this depending where you do the search in case an app prepends specific search paramets, such as looking only in one index.

--
Jesse Trucks
Minister of Magic

Can we combine data from different Apps?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic Operations Start with Context: Build the Right Data Foundation

Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Session 2 | Beyond the Thread: Operationalizing AI with Confidence

Join the Conversation

Can we combine data from different Apps?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic Operations Start with Context: Build the Right Data Foundation

Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Session 2 | Beyond the Thread: Operationalizing AI with Confidence