Hi Team,
I have three sourcetypes, all the sourcetypes have two or three common fields , how to extract the data as it should fetch data from all three source type
for ex: Field "City" is common in all source types, to display it on a dashboard using dropdown, what will be the search query or suggest some way to start on this
My idea is to execute search string : input lookup file1.csv file2.csv file3.csv|stats city as City is this correct ?
or is there any convenient way to fetch it easily
if they are lookup files, maybe something like this:
|inputlookup file1.csv|table City|append [|inputlookup file2.csv|table City]|append [|inputlookup file3.csv|table City]|stats count by City|fields - count