Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Compare two sources with multiple value

$
0
0
Hi folks, Hi have a case needing to compare 2 sources with CSV type Source 1 has fields as below: start_time_s1, end_time_s1, source_ip_s1, account Source 2 has fileds as below: start_time_s2, end_time_s2, source_ip_s2 I need to compare with the condition: *If* (start_time_s1 < start_time_s2) AND (end_time_s2 < end_time_s1) AND (source_ip_s2 = source_ip_s1) *then* table start_time_s2, end_time_s2, source_ip_s2, account How way can I solve this query? Regards,

Viewing all articles
Browse latest Browse all 47296

Trending Articles