Hi, How to join results of 2 different searchs?? using OR??
You're not saying much about the exact desired result, but if you want to run two completely different searches and have the results from one of them appended to the results of the other, you would use append.
append
search1 | append [search search2]
http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Append
