Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Using results from a Loadjob and data from an index in the same SPL Query.

$
0
0
Hi all, I am trying to use the results from a loadjob but to link these to data thats held in an index. I can define the loadjob entry but I cannot appear to include the index & source in the same SPL. Both the "| Loadjob" and the "index=a source=b" loads fine in a separate SPL instance What is the best way to achieve this.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>