Hi,
I need a way to check if a value is in a sub search table result.
for example I use the code that doesent work:
index=testeda_p groupID=sloc_data
| search project=Periph core=ipa core_ver=* sloc_type="rtl"
| search _time contains
[ search index=testeda_p groupID=sloc_data (project=Periph) (core=ipa) core_ver=* sloc_type="rtl"
| sort -_time
| dedup core_ver
| table _time
]
| table project core core_ver file sloc_date sloc_type sloc upload_id _time
Thanks
↧