Hello, I am a freshmen with splunk. I got a problem trying to concat two/more searches into 1. pretty much my data looks like so { "TimeStamp": "\/Date(1630425120000)\/", "Name": "Plan-MemoryPercentage-Maximum.json", "Maximum": 14 } { "TimeStamp": "\/Date(1630425120000)\/", "Name": "Plan-MemoryPercentage-Average.json", "Average": 14 } both sets will have the same timeStamp for the entries and I just want a table that will have the matching time stamps and a column for max and a column for avg so far I'm able to get a single table going that has a query that looks like Name="Plan-MemoryPercentage-Maximum.json" | table * | fields TimeStamp, Maximum | fields - _time, _raw but I'm really struggling to figure out how to concat 2 searches into 1 table anyone have any ideas?
... View more