×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
Wilfred
Engager
Member since: ‎11-09-2021
‎03-19-2024
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-09-2021
Activity Feed
Topics I've Started
View All

Re: multiple sources

by in Splunk Search
‎11-10-2021 03:31 AM
‎11-10-2021 03:31 AM
Worked almost fine tat once, had to change the fillnull value to 0 to avoid that all orders get status 700 which not exists. Thanks a lot helping me out! ... View more

multiple sources

by in Splunk Search
‎11-09-2021 11:43 PM
‎11-09-2021 11:43 PM
Hi, I just started working with Splunk and would ask for some help. I have 3 sources, A, B and C. Source A contains fields Ordernr, Salesvalue  Source B contains fields Ordernr, Status Source C contains fields Ordernr, Producttype  All sources have around few million records. What i would like to get is a result set with: A.Ordernr, A.Salesvalue, C.Producttype  where A.Ordernr not exists in B.Status=700 and A.Ordernr exists in C.Ordernr Hope my question is clear  Thanks in advance for helping me out!       What i would like to do is to have a resul   ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎03-19-2024 07:56 AM