Hi,
I have ID and dates in my output. (consider this is the data from 02-07-2016 to 02-10-2016)
e.g
ID Ingestion_Date
1 2-10-2016
1 2-09-2016
1 2-07-2016
2 2-10-2016
2 2-08-2016
Now, I want to find the dates when these IDs did not get ingested. eg: Output should be:
ID Ingestion_Date
1 2-08-2016
2 2-09-2016
2 2-07-2016
How can we achieve this Splunk?
Thanks in advance!
↧