Hello everyone,
The time modifiers don't seem seem to work for this search, am I doing something wrong?
|union
[search query.. earliest=-15m@m latest=now
|join type=inner x[query.....
TL;DR - Is there a way (without custom scripts or commands) to run a command from a string in the format of a union that contains a dynamic number of subsearches?
I have quite a few heavy d...
Hello, i need do something like this
select t_resources.t_name, t_users.t_nick
from t_resources
left join t_users on t_users.t_id = t_resources.t_userid
union
select t_resources.t_name...
...hen using the Union command in the search header, does the search run in one indexer? (Use CPU 1 core?)
If not, does one search statement run on multiple indexers? (Using multiple CPUs?)
The p...
I have 2 searches: 1) |dbxquery query="select member, gate, port from fo.member connection=fo_member" 2) |dbxquery query="select description from fo.date connection=datelog" How I can union t...