https://community.splunk.com/t5/Splunk-Enterprise/Lookup-comparison/m-p/702656#M20601 <P>Hello,<BR /><BR />Example I have 2 lookups, first.csv and second.csv<BR /><BR />first.csv have 1 column name=fruit_name and with multivalue</P><P>first.csv</P><TABLE border="1" width="100%"><TBODY><TR><TD width="100%"><STRONG>fruit_name</STRONG></TD></TR></TBODY></TABLE><TABLE border="1" width="100%"><TBODY><TR><TD width="100%">apple<BR />banana<BR />melon<BR />mango<BR />grapes<BR />guyabano<BR />coconut</TD></TR></TBODY></TABLE><P><BR /><BR />second.csv have 2 column fruits and remarks with multivalue under fruits column</P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%"><STRONG>fruits</STRONG></TD><TD width="50%"><P><STRONG>remarks</STRONG></P></TD></TR><TR><TD width="50%">apple<BR />mango<BR />guyabano</TD><TD width="50%"><P>visible</P></TD></TR></TBODY></TABLE><P><BR />How can i check if all the values of second.csv (apple,mango,guyabano) are present in the column fruit_name under first.csv then echo out the remarks with the value of visible</P><P><BR />Thanks in advance</P> Thu, 24 Oct 2024 05:21:39 GMT iamtheclient20 2024-10-24T05:21:39Z https://community.splunk.com/t5/Splunk-Enterprise/Lookup-comparison/m-p/702656#M20601 <P>Hello,<BR /><BR />Example I have 2 lookups, first.csv and second.csv<BR /><BR />first.csv have 1 column name=fruit_name and with multivalue</P><P>first.csv</P><TABLE border="1" width="100%"><TBODY><TR><TD width="100%"><STRONG>fruit_name</STRONG></TD></TR></TBODY></TABLE><TABLE border="1" width="100%"><TBODY><TR><TD width="100%">apple<BR />banana<BR />melon<BR />mango<BR />grapes<BR />guyabano<BR />coconut</TD></TR></TBODY></TABLE><P><BR /><BR />second.csv have 2 column fruits and remarks with multivalue under fruits column</P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%"><STRONG>fruits</STRONG></TD><TD width="50%"><P><STRONG>remarks</STRONG></P></TD></TR><TR><TD width="50%">apple<BR />mango<BR />guyabano</TD><TD width="50%"><P>visible</P></TD></TR></TBODY></TABLE><P><BR />How can i check if all the values of second.csv (apple,mango,guyabano) are present in the column fruit_name under first.csv then echo out the remarks with the value of visible</P><P><BR />Thanks in advance</P> Thu, 24 Oct 2024 05:21:39 GMT https://community.splunk.com/t5/Splunk-Enterprise/Lookup-comparison/m-p/702656#M20601 iamtheclient20 2024-10-24T05:21:39Z https://community.splunk.com/t5/Splunk-Enterprise/Lookup-comparison/m-p/702675#M20604 <P>how have you set up your csv files so that they have multivalue fields?</P> Thu, 24 Oct 2024 09:37:14 GMT https://community.splunk.com/t5/Splunk-Enterprise/Lookup-comparison/m-p/702675#M20604 ITWhisperer 2024-10-24T09:37:14Z