I want to combine several sources into one table and I'm using this search: sourcetype="firstsourcetype" somefield="value" | head 50 | join uuid [search sourcetype="secondsourcetype"] | join uuid [search sourcetype="thirdsourcetype"] But if one of the sourcetypes doesn't exist, I don't get the data at all. I'm looking for a way to fix it. Thanks in advance
... View more