topic help on comparison between 2 lookup in Knowledge Management

help on comparison between 2 lookup

jip31 — Wed, 30 Sep 2020 02:38:55 GMT

I use the search below in order to retrieve the fields host ,SITE and STATUS from a lookup and to compare them with the field host in another lookup
| inputlookup host.csv
| lookup lookup_cmdb_fo_all.csv HOSTNAME as host output SITE STATUS
| stats values(SITE) as SITE, values(STATUS) as STATUS by host

Now I need to display the host that exist in a lookup but not in another lookup
could you help me please??

Re: help on comparison between 2 lookup

gcusello — Thu, 17 Oct 2019 10:51:21 GMT

Hi jip31,
do you want this in the same search or in another one?

if in another one it's easy:

| inputlookup host.csv NOT [ |inputlookup lookup_cmdb_fo_all.csv | rename HOSTNAME AS host | fields host ]
| ...

if instead you want this in the same search you have to modify your search in this way:

| inputlookup host.csv
| lookup lookup_cmdb_fo_all.csv HOSTNAME as host output SITE STATUS
| stats values(SITE) as SITE, values(STATUS) as STATUS by host
| eval Status=if(isnull(SITE),"Not present","Present")

Ciao.
Giuseppe

Re: help on comparison between 2 lookup

jip31 — Thu, 17 Oct 2019 10:58:51 GMT

hi guiseppe perfect thanks