Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Find missing PC from two indexes same field heading /name

$
0
0
Trying to create a report using two indexes on same field "Pcname". Different datatype one of from **Active Directory** and other one is from **SCCM**. Same computer are present in both indexes see also the attach screen short. Desire results: - If missing form for either Index or not reported back in last 30 days - nice it have one report but if not possible then we can break in 2 reports or more if needed Thanks in advance ![alt text][1] [1]: /storage/temp/275748-d-results.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles