Hello,
This can be possible using join command but you need to have 2 identical field names.
You can use eval or rename to make 2 identical fields and than use a left join on the common field.
You can find join documentation here:
https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Join
... View more
Hello!
You can try to output your inputlookup results (since inputlookup should be the first item in your search) with the MAP command to combine results.
You can find more info about this in the following posts:
https://docs.splunk.com/Documentation/SplunkCloud/8.0.0/SearchReference/Map
https://answers.splunk.com/answers/743935/problem-with-map-command-using-search-from-lookup.html
... View more