Hi,
I have a question for searching.
I want to search from host 'A' (based on multiple values of a field of another search from host 'B').
In other words, I have a search result (values of field 'id') from host 'B' as below:
search query: host='B' "Test" | fields + id | table id
And I want to find results for all values of 'id' in host 'A'.
I tried sub-search, but it seems it only works for one value of a field. (I am newbie, maybe I might be wrong)
Can anyone provide any suggestion?
Hi song_jin99,
at first are you sure that:
if yes try something like this
index=your_index host=hostA [search index=your_index host=hostB | fields id ]
Bye.
Giuseppe
Hi song_jin99,
at first are you sure that:
if yes try something like this
index=your_index host=hostA [search index=your_index host=hostB | fields id ]
Bye.
Giuseppe
If this answer satisfies your question, please accept or upvote it.
Bye.
Giuseppe
Thanks Cusello