Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do I lookup/return a field from one sourcetype to another sourcetype?

$
0
0
Hi All, Newbie here, would appreciate if anyone can help to answer this little question Feeds from Vulnerability Scanner having two sourcetypes - *sourcetype='A'*: We have *asset_id* and asset_name *sourcetype='B*': We have *asset_id* and *vulnerability_name* I need schedule a query (runs everyday) to output *assest_id* and *asset_name* details to a csv file or to an table from *sourcetype='A'* In next query, need to table *asset_name*, *vulnerability_name* with respect to that of an *asset_id*. **Please NOTE**: I was asked not to use 'Joining Commands'. Thanks in Advance.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>