I am trying to join two fields from different indexers, they both return IP Addresses but are under different field names.
Use an eval to create the missing field in one of the searches.
example : source=fileA | JOIN fieldA [ search source=fileB | eval fieldA=fieldB ]
source=fileA | JOIN fieldA [ search source=fileB | eval fieldA=fieldB ]
