Example: After putting union for searches from 3 different host i am getting below events 9/15/20 15/09/2020,000123,2328896.34 11:47:45.000 PM host = host1 AIXsource = /path1/file1.csv = type1.csv 9/15/20 15/09/2020,000123,453784.34 8:00:00.000 PM host = host2 AIXsource = /path2/file2.csv = type2.csv 9/15/20 2020-09-14,123,1378088.93 1:56:41.000 AM host = host3 AIXsource = /path3/file3.csv = type3.csv But here now problem is currently _time is the common filed in all 3 searches but if i want to use date all 3 searches to compare on then issue is all 3 date fields have different name and format as they are from different host.
... View more