We have 2 log files with a coloum in common. I saved the first search and use "lookup" to connect it to the second search.
While my colleague, he use "append". We got two very close result, but they are not the same. Just 1 or 2 different in the total number in the result. Could anybody told me, whose search is more precise? Or under what circumustance, "lookup", or "append", is more precise ?