Our login page is developed by team1 and the main home page (After login) is developed by team2. The event logs from each use completely different structures. I strongly suspect unique system identifiers in the login logs may be carried into the home page logs, but I don't know which fields (out of 20-50 fields in each log) may contain similar values.
Is there a method to find fields that have the same value in both sources if I don't know which fields to match on?
(index=A sourcetype="login" colA="apple", colB="ABC123" , colC="purple") (index=B sourcetype="home" field1="yellow", field2="orange", ..., field20="ABC123", field21="Monkey")
How can I search both sources to identify ( login.colB == home.field20) if I don't know in advance those fields match? I may not find ANY common values...
... View more