Hello adityapavan18.
Thank you for the reply.
I have to create two files that does following things.
Keep Track of overall number of events processed in schedule events.
Create fields for external application by csv
These two has to be done in one search.
Thanks,
Yu
You can append a 2nd search, something like:
index=myindex | head 5 | outputlookup test1.csv | append [ search index=myindex head 10 | outputlookup test2.csv
]
Hello norber.
Thank you for the reply.
But this way its like two different search exists in one search.
I want to do something like:
index = myindex | eval f1 = 1 | eval f2 = 2 | table f1 | outputcsv test1.csv | table f2 | outputcsv test2.csv
Would this be possible?
Thanks,
Yu
I think that is the only way to create same copies of a csv
out of curiosity..why do you need two files.