Skip to main content
Sumo Logic

5.2 Evaluate information from more than one source

Problem

You need to process log information from more than one source, in the same way you might write a database query to combine information from more than one table.

Solution

Use the join operator:

join

Discussion

The join operator matches log messages from different data sources based on specific queries.