Hi,
Got two different searches result in to corresponding table format, want to achieve something like "select b.column1, b.column2 from table a, table b where a.column1 = b.column1" in single search.
Table 'a' contain a single column named TransactionID where table 'b' contain two columns named TransactionID , Errors
Search 1 : index=app source=.log "FATAL" | rex "some value (?.+) somemore" | table TID
Search 2 : index=app source=.log "ERROR_TEXT" | rex "some value (?.+) somemore" | rex field=_raw "some txt (?.+)" | table TID, ErrorText
Required output like "select b.column1, b.column2 from table a, table b where a.column1 = b.column1" in single search.
... View more