You will need to replace. Keyword=blah index=index1 or index=index2 or index=index3 | foo by bar Index=myindex | where fielda=fieldb.

Webto search multiple indexes in splunk, use the `index` and `source` parameters. Webfeb 20, 2019 · yes correct, this will search both indexes. 1) look in a table. Weboct 16, 2012 · you just specify those indexes on the search line: This command requires at least two subsearches and allows only. Searching in multiple indexes. I am trying to create a search to do the following:

This command requires at least two subsearches and allows only. Searching in multiple indexes. I am trying to create a search to do the following: Webuse the where command to compare two fields. Webthe multisearch command is a generating command that runs multiple streaming searches at the same time. For not equal comparisons, you can specify the criteria in several ways. Webi have index called index1 which has sourcetype called sourcetype1 and another index called index2 with sourcetype called sourcetype2. You can use the `search` command to search multiple indexes at once. Websep 25, 2019 · splunk search. If you want to coorelate between both indexes, you can use the search below to get you started.

For not equal comparisons, you can specify the criteria in several ways. Webi have index called index1 which has sourcetype called sourcetype1 and another index called index2 with sourcetype called sourcetype2. You can use the `search` command to search multiple indexes at once. Websep 25, 2019 · splunk search. If you want to coorelate between both indexes, you can use the search below to get you started.

If you want to coorelate between both indexes, you can use the search below to get you started.