Splunk Search

Merge tables by aligning fields with same value

Thuan
Explorer

Hello,

I have two tables listed below. The small table is a subset of the large table.

Large_table Small_table

large_source_field small_source_field
Account_Domain registry_key_name
Account_Name registry_path

AddressFamily registry_type
registry_key_name

registry_path

registry_type

I like to merge the two tables into a single one (see below) with entries with the same value on the same row

After_merging_table

large_source_field small_source_field
Account_Domain

Account_Name

AddressFamily

registry_key_name registry_key_name
registry_path registry_path
registry_type registry_type

Any help will be much appreciated

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...