Answer by warren for Using if to get splunk rseslut from another index

Without sample data, this is only a guess, but this join form should work: index=ndxA sourcetype=srctpA | timechart span=10m MAX(count) as result | eval temp=if(result > 150 ,1,0) | streamstats sum(temp) AS tempsum window=2 | eval Alert=if(tempsum == 2 , 1,0) | join Alert [| index=ndxB sourcetype=srctpB process_name=* | stats count by process_name | eval …
Continue reading Answer by warren for Using if to get splunk rseslut from another index

Favorite tweets

US couple facing the death penalty in Uganda for trafficking foster child https://t.co/ONFok87UI4 https://t.co/Y0k630z2Mj — New York Post (@nypost) Dec 22, 2022 from http://twitter.com/nypost via IFTTT

“with every successful thing, some will look to exploit it. #Spam, information theft and a range of other attack vectors suddenly became possible at a previously unimaginable scale” https://t.co/piyWF3xzLm https://t.co/xGKSzRKU8p

“with every successful thing, some will look to exploit it. #Spam, information theft and a range of other attack vectors suddenly became possible at a previously unimaginable scale” https://t.co/piyWF3xzLm https://t.co/xGKSzRKU8p — Warren Myers 🐧🐿 (@warrenmyers) Dec 22, 2022 from Twitter https://twitter.com/warrenmyers December 22, 2022 at 04:02AM via IFTTT

This is going to be a long post. So grab a drink, settle somewhere comfortable, and let’s get stuck in. https://t.co/H5vDxzcNoN via @highscal 02 Dec https://t.co/gULmRoSjfb

This is going to be a long post. So grab a drink, settle somewhere comfortable, and let’s get stuck in. https://t.co/H5vDxzcNoN via @highscal 02 Dec https://t.co/gULmRoSjfb — Warren Myers 🐧🐿 (@warrenmyers) Dec 21, 2022 from Twitter https://twitter.com/warrenmyers December 21, 2022 at 02:58PM via IFTTT

Favorite tweets

Who will succeed John MacArthur? Season 2. Episode 8. “MacArthur and His Successor” https://t.co/C1JBbivuFf — Jeremy Vuolo (@Jeremy_Vuolo) Dec 21, 2022 from http://twitter.com/Jeremy_Vuolo via IFTTT

Favorite tweets

Mysterious people put others in a kind of inferior position β€” that of trying to figure them out. All great leaders know that an aura of mystery draws attention to them and creates an intimidating presence. — 48 Laws Of Power Bot (@48_quotes) Dec 21, 2022 from http://twitter.com/48_quotes via IFTTT

Favorite tweets

@pmarca @LTF_01 Education is going to have to change quickly to account for AI. This is not a bad thing. — rebelEducator (@rebelEducator) Dec 21, 2022 from http://twitter.com/rebelEducator via IFTTT

Favorite tweets

Another edifying and motivating episode from Austin Duncan (with cameos from John Piper and Tony Reinke). https://t.co/RZlvq4i3Pf — Andy Naselli (@AndyNaselli) Dec 21, 2022 from http://twitter.com/AndyNaselli via IFTTT

Favorite tweets

@warrenmyers 🌎 Dec 21, 2022 🌍 πŸ”₯ 33 | Avg. Guesses: 6.26 🟨🟨πŸŸ₯πŸŸ₯πŸŸ₯πŸŸ₯🟩 = 7 https://t.co/bcsxw4mxhJ #globle — CatsFanInOhio πŸ‡ΊπŸ‡¦ (@michaeldf88) Dec 21, 2022 from http://twitter.com/michaeldf88 via IFTTT

`”We can conclude that different social groups were buried here in clusters,” explains Fynn Wilkes.` https://t.co/RqYdftWedo https://t.co/ekUKpEmTkT

`”We can conclude that different social groups were buried here in clusters,” explains Fynn Wilkes.` https://t.co/RqYdftWedo https://t.co/ekUKpEmTkT — Warren Myers 🐧🐿 (@warrenmyers) Dec 21, 2022 from Twitter https://twitter.com/warrenmyers December 21, 2022 at 08:56AM via IFTTT

Favorite tweets

Dogbert Crypto Advice by Scott Adams https://t.co/q0Iw4a5UK8 via @Dilbert_Daily — Scott Adams (@ScottAdamsSays) Dec 21, 2022 from http://twitter.com/ScottAdamsSays via IFTTT

“Wherever passenger trains go, the cleaning system could go β€” it could be used to clean every railway line in the country, if adopted widely” https://t.co/BpLXPxgF6j #dryice #cryogeniccleaning

“Wherever passenger trains go, the cleaning system could go β€” it could be used to clean every railway line in the country, if adopted widely” https://t.co/BpLXPxgF6j #dryice #cryogeniccleaning — Warren Myers 🐧🐿 (@warrenmyers) Dec 21, 2022 from Twitter https://twitter.com/warrenmyers December 21, 2022 at 04:03AM via IFTTT

@michaeldf88 🌎 Dec 21, 2022 🌍 πŸ”₯ 49 | Avg. Guesses: 6.34 πŸŸ₯🟧πŸŸ₯πŸŸ₯🟩 = 5 https://t.co/D1t41eb7bA #globle

@michaeldf88 🌎 Dec 21, 2022 🌍 πŸ”₯ 49 | Avg. Guesses: 6.34 πŸŸ₯🟧πŸŸ₯πŸŸ₯🟩 = 5 https://t.co/D1t41eb7bA #globle — Warren Myers 🐧🐿 (@warrenmyers) Dec 21, 2022 from Twitter https://twitter.com/warrenmyers December 21, 2022 at 12:16AM via IFTTT

Favorite tweets

Growers must decide whether to harvest early and jeopardize taste, or wait and risk losing the fruit to a long cold freeze. https://t.co/JQ33j9hwXG — Axios (@axios) Dec 21, 2022 from http://twitter.com/axios via IFTTT