Splunk Coalesce Function

Coalesce in splunk - splunk coalesce Splunk query will return all the events within a five minute time coalesce fields from different sources or indexes to create a transaction of coalesce معنى Using the splunk coalesce command can create a new field with information from both fields and can also insert a value if none exists

coalesce db2  eval src_ip = coalesce eval hostname = coalesce