klotz: splunk* + logs*

Bookmarks on this page are managed by an admin user.

0 bookmark(s) - Sort by: Date ↓ / Title / - Bookmarks from other users for this tag

  1. append - to append the search result of one search with another (new search with/without same number/name of fields) search.
    Usually to append final result of two searches using different method to arrive to the result (which can't be merged into one search)

    appendpipe - to append the search results of post process (subpipeline) of the current resultset to current result set.
    Typically to add summary of the current result set.

    appendcols - to append the fields of one search result with other search result. Fields are added row-wise, 1st row of first search will be merged with 1st row of 2nd search.
    Value of common fields between results will be overwritten by 2nd search result values.
    Typically to show comparitive analysis of two search results in same table/chart.
  2. questionable security in the script but the source of file list is interesting

Top of the page

First / Previous / Next / Last / Page 1 of 0 SemanticScuttle - klotz.me: Tags: splunk + logs

About - Propulsed by SemanticScuttle