Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

finding it challenging to find the difference of two query results

$
0
0
hi team, i have two queries as follows **query1:** |inputlookup abc.csv |table file sla_time **query2:** index=xxx source=yyyy |table file2 **file2** values are subset of **file** values. I want to print the difference between the **file** and **file2** fields along with the **sla_time** from the first query. Can you help me here @jkat54 @vnravikumar

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>