×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
splunk_eval
Explorer
Member since: ‎11-22-2012
‎06-05-2020
Community Statistics
Posts 3
Solutions 0
Karma Given 1
Karma Received 1
Member Since ‎11-22-2012
Activity Feed
View All

Re: Joining two large datasets without a Join

by in Splunk Search
‎11-23-2012 05:36 PM
1 Karma
‎11-23-2012 05:36 PM
1 Karma
That'll work well if there's a 1-1 mapping between source1 and source2. If not, the description will only attach to the 1st matching filename. If you set max=0 in selfjoin, your results will explode ... ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All
Karma given to
View All