Hi all,
I have a use case. I have a list of the top viewed products for the last 3 months individually. Now, I want to take the common values from the 3 results and want to have the trend for those common values. Which command do I have to use in a search? Please provide suggestions as I am new to Splunk.
Thanks in advance.
use appendcols
command to do it
Index=list1 source=your_source_name sourcetype=your_sourcetype_name| ...| appendcols [ search Index=list2 source=your_source_name sourcetype=your_sourcetype_name | ... ]| appendcols [ search Index=list3 source=your_source_name sourcetype=your_sourcetype_name | ... ]