9/9/2023 0 Comments Splunk join 2 searchesHowever I noticed, the subquery results will shows up in the "CE" field, but does not show up in "TC" field. See How search types affect Splunk Enterprise performance in the Capacity Planning Manual.Hi, I have 2 sample logs and I need to combine them into 1 query to grab the "Accesses" values,ĭue to the log format differences, I have combined 2 different queries using append/sub-search. Some examples of these searches include: counting the number of errors that occurred or finding all events from a specific host.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |