topic Re: Compare two fields and ignore the data with same values in Splunk Search https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/521787#M147059 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/136349">@Raghav2384</a>&nbsp;</P><P>There is also one more condition. Final result must find common Plugin_ID between (earliest=-180d@d latest= <A href="mailto:-30d@d" target="_blank">-30d@d</A>) and ((earliest=-35@d latest= now)</P> Mon, 28 Sep 2020 13:16:33 GMT bhagatdd 2020-09-28T13:16:33Z Compare two fields and ignore the data with same values https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/175792#M50502 <P>Hi,</P> <P>I am trying to include a condition where splunk needs to ignore when it two different fields has the same values.</P> <P>Any suggestions?</P> Thu, 08 Jan 2015 05:01:11 GMT https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/175792#M50502 Meena27 2015-01-08T05:01:11Z Re: Compare two fields and ignore the data with same values https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/175793#M50503 <P>Post your search if possible.</P> <P>I would assume adding something like this at the end of your search</P> <PRE><CODE>...|more search| where field1 != field2 </CODE></PRE> <P>That gives results where the two fields are not equal. Hope this helps.<BR /> Thanks,<BR /> Raghav</P> Thu, 08 Jan 2015 05:49:50 GMT https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/175793#M50503 Raghav2384 2015-01-08T05:49:50Z Re: Compare two fields and ignore the data with same values https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/521787#M147059 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/136349">@Raghav2384</a>&nbsp;</P><P>There is also one more condition. Final result must find common Plugin_ID between (earliest=-180d@d latest= <A href="mailto:-30d@d" target="_blank">-30d@d</A>) and ((earliest=-35@d latest= now)</P> Mon, 28 Sep 2020 13:16:33 GMT https://community.splunk.com/t5/Splunk-Search/Compare-two-fields-and-ignore-the-data-with-same-values/m-p/521787#M147059 bhagatdd 2020-09-28T13:16:33Z