You don’t have to master Splunk by yourself in order to get the most value out of it. Whenever possible, try to find alternative solutions before using the join command. However, we want to use it responsibly, so we don’t accidentally clog up our environment. Join can be a very powerful tool for building coherent tables of data from multiple sources. You will still have to wait for the main search to finish. If you build a complicated subsearch that takes a long time to complete, it will always a long time to complete, even when using the join command.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |