Hi,
I have two searches `index= windows EventCode=1234 Logon_Type=8 | table host | dedup host`
and `index=iis host=*|table host|dedup host`
How to combine both these queries to display only the hosts which have that particular EventCode and Type and also in the IIS index.
Thanks in advance.
↧