You can use the join command on the StartTime field. Check out: http://docs.splunk.com/Documentation/Splunk/6.2.2/SearchReference/Join
You can use the join command on the StartTime field. Check out: http://docs.splunk.com/Documentation/Splunk/6.2.2/SearchReference/Join