How to implement "not in" in splunk?
I want to find out the data that is not in the collection, as shown below
![alt text][1]
But always make mistakes, as shown below.
![alt text][2]
[1]: /storage/temp/255914-notin.png
[2]: /storage/temp/255915-notinraw.png
↧