I want to get the combined result of two events. E.g The first event have reference ID, Name & IP and the second event contains Email ID & reference ID. So here I need to get the combined result of first and second events. i.e., It would be like "Reference ID, Name, IP & Email". Is there any possibility to join both event values?
I have to get these results with 2 searches as below
sourcetype="" "Name" AND "IP address" referenceId!="" | Table referenceId
index="" referenceId AND Email
... View more