Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Compare 2 field values from different sources.

$
0
0
**Scenario** We process emails looking for order numbers (ON). We need to be able to compare the order numbers we seen in the emails to our database. We're looking for matching and not matching order numbers. **How the data looks.** ON_email: 123, 234, 345, 456 ON_database: 123, 098, 456 Order numbers that match (seen in both database and emails): **123, 456** Order numbers only seen in database: **098** Order numbers only seen in emails: **234, 345** `index = a OR index = b | table ON_email ON_database`<< This works and shows all the data. But when i try to compare i can't see any data. Any ideas?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>