Hi im currently having a search that result multiple field, and i wish to pipe those values into a new search that match some and/or condition. how can i do this?
Index A search result:
A1 | B1 | C1 | D1
| D2
It will then search index B and should only show result that match (A1 and B1 and D1) OR (A1 and B1 and D2)
Hi apparently the answer can be found in another thread:
https://answers.splunk.com/answers/672325/using-subsearch-we-can-pull-several-fields-to-main-1.html
Hi apparently the answer can be found in another thread:
https://answers.splunk.com/answers/672325/using-subsearch-we-can-pull-several-fields-to-main-1.html