Splunk Search Multiple Indexes
This command requires at least two subsearches and allows only. Weboct 16, 2012 · you just specify those indexes on the search line: Webuse the where command to compare two fields. For not equal comparisons, you can specify the criteria in several ways. You can use the `search` command to search multiple indexes at once.
Some data is in combination of. Websep 25, 2019 · splunk search. 1) look in a table. Index=myindex | where fielda=fieldb. Webthe multisearch command is a generating command that runs multiple streaming searches at the same time. If you want to coorelate between both indexes, you can use the search below to get you started. Keyword=blah index=index1 or index=index2 or index=index3 | foo by bar Webi have index called index1 which has sourcetype called sourcetype1 and another index called index2 with sourcetype called sourcetype2. You will need to replace. Webfeb 20, 2019 · yes correct, this will search both indexes. I am trying to create a search to do the following: Searching in multiple indexes.
I am trying to create a search to do the following: Searching in multiple indexes.
