Here is our situation:
Given that we have a base search, using the Splunk Java SDK, we would like to do the below two steps
1) execute the base search and get the results with 'post process search 1', and do something
2) get the results from the base search that was executed previously with 'post process search2' and do something
I know step 1 is pretty straightforward, but would like to know how I can get the results from the base search executed in step#1 and apply it to the second post process search. Should I just get the results from the history? What is the best way to get the results from the base search job?
Appreciate your help.
↧