Archive
Highlighted

How to exclude equal values in different columns

Engager

How to exclude equal values in different columns to obtain stats with different values only? I want to exclude similarities to list only where the user and sysuser are different.

index=example* stuff
| stats count by user, sysuser

*user *sysuser
Bill Bill
Steve Steve
Dave Jon
Vince Daniel

Any Ideas?

Tags (1)
0 Karma
Highlighted

Re: How to exclude equal values in different columns

Motivator
index=example* stuff
| stats count by user, sysuser
| where user!=sysuser