Splunk Search

How to join two tables?

Path Finder

Hi All,

I have a search:
| savedsearch Cycle_11
| append
[| savedsearch Cycle_10]

with the results:
alt text

The result I want is something like this:
alt text

What do I need to do to get the result I want?
I have tried appendcols but the results is somehow messed up.

Both savedsearch returns more than 30,000 results.

I hope someone can help me with this.

Thanks in advance and Best Regards 🙂

Tags (2)