Splunk Search

Is it possible to combine multiple table views into one stats table?

joe06031990
Communicator

Hi,

I have a dashboard with multiple table views from different indexes and just wondered if it is possible to combine them all in one stats table?

 

Thanks,

 

Joe

Labels (6)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Maybe.  You'd have to write a new search that searches the different indexes and produces the desired stats table.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Thanks for the Memories! Splunk University, .conf24, and Community Connections

Thank you to everyone in the Splunk Community who joined us for .conf24 – starting with Splunk University and ...

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...