As previously mentioend you can use "append" or "appendcols", or you can use "join". If you use "join", you will need a common field to join on, but this can easily be accomplished by adding ... | eval joinOn="blahblahblah" to both searches, then use the new field "joinOn" (which has the same value in both searchs) as the field to join on.
I imagine you probably want to use append or appendcols though...
Author: Pres. Carey Rath
Last Updated:
Views: 6336
Rating: 4 / 5 (41 voted)
Reviews: 80% of readers found this page helpful
Name: Pres. Carey Rath
Birthday: 1997-03-06
Address: 14955 Ledner Trail, East Rodrickfort, NE 85127-8369
Phone: +18682428114917
Job: National Technology Representative
Hobby: Sand art, Drama, Web surfing, Cycling, Brazilian jiu-jitsu, Leather crafting, Creative writing
Introduction: My name is Pres. Carey Rath, I am a faithful, funny, vast, joyous, lively, brave, glamorous person who loves writing and wants to share my knowledge and understanding with you.