Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do you combine info from multiple events but for one customer in one table.

$
0
0
How do you combine info from multiple events but for one customer in one table or dashboard? For example: Event1: Customer = 123456 State=”” Status=”200” Event2: Customer = 123456 State=”NJ” Status=”500” Event3: Customer = 123456 State field is missing Status=”400” Dedup Customer Where Status=”400” Table Customer, State Expected Result: Customer State 123456 NJ

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>