Splunk Search

How to join two searches?

blavie93
New Member

Hi! I have two searches. I want to use result of one search into another. I used Join command but I want to use only one matching field in both searches. How Can I do that?

Tags (2)
0 Karma

Sukisen1981
Champion

first search | join (matching field name) [search second search]

0 Karma
Get Updates on the Splunk Community!

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...