Splunk Search Multiple Indexes
Weboct 16, 2012 · you just specify those indexes on the search line: Webi have index called index1 which has sourcetype called sourcetype1 and another index called index2 with sourcetype called sourcetype2. If you want to coorelate between both indexes, you can use the search below to get you started. Websep 25, 2019 · splunk search. You will need to replace.
You can use the `search` command to search multiple indexes at once. This command requires at least two subsearches and allows only. I am trying to create a search to do the following: Some data is in combination of. Index=myindex | where fielda=fieldb. Searching in multiple indexes. Webuse the where command to compare two fields. Webfeb 20, 2019 · yes correct, this will search both indexes. Webthe multisearch command is a generating command that runs multiple streaming searches at the same time. Webto search multiple indexes in splunk, use the `index` and `source` parameters. 1) look in a table. For not equal comparisons, you can specify the criteria in several ways.
1) look in a table. For not equal comparisons, you can specify the criteria in several ways.
