Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to get the rest of values from the search?

$
0
0
I've two search queries. two queries will return common fields Event & UUID. I've to get the results from first search which are not present in the second query. Query 1: State="ConsumeMessageFromRabbitMQ" Action="Received-From-RabbitMQ-Server" Query 2: State="SendEmail" Action="After-SendEmail" Can anyone provide the best query to find them. Thanks in advance

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>