search help...!!

[shri_27]

Hi,
How to join results of 2 different searchs?? using OR??

[Ayn]

You're not saying much about the exact desired result, but if you want to run two completely different searches and have the results from one of them appended to the results of the other, you would use append.

search1 | append [search search2]

http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Append