hi
In a first lookup (host.csv), I have a field "host"
In a second lookup (toto.csv), I have also a field "host"
Is it enough to do
| inputlookup host.csv
for that the host in the first lookup match with the host in the second lookup?
| appendcols
[| inputlookup toto.csv]
Is there also any way to do this?
thanks
For example
| inputlookup host.csv |dedup host| eval no=1
| append [| inputlookup toto.csv |dedup host|eval no=2]
| stats sum(no) as no by host
| eval match=case(no==1,"host.csv",no==2,"toto.csv",no==3,"match")
If only matches
| inputlookup host.csv
| search [| inputlookup toto.csv |dedup host|table host]
For example
| inputlookup host.csv |dedup host| eval no=1
| append [| inputlookup toto.csv |dedup host|eval no=2]
| stats sum(no) as no by host
| eval match=case(no==1,"host.csv",no==2,"toto.csv",no==3,"match")
If only matches
| inputlookup host.csv
| search [| inputlookup toto.csv |dedup host|table host]
PERFECT THANKS