Can splunk search for different indexes that contain different fields, and present that data out in readable format?
I am trying to use one search that looks in index A, for specific fields, then another search for index B, looking for different fields than are contained in index A.
This is in an attempt to give out a daily report that can give us a single email showing us different tables on a single email of:
cpu percentage
drive full percentage
status of an application (running/stopped)
etc.
Or is there perhaps a way that splunk can merge separate reports into one, and email it out in the message body?
I will continue looking, but any help is appreciated. thanks.
↧