Hey.
I have a dataset as follows:
I have a 2nd dataset as follows::
I need to perform a lookup between both both I am getting 3 empty columns after the lookup from the 2nd dataset:
Can you please help?
Here is the query I am using:
|inputlookup ABC
| eval AR_ID=_key
| lookup XYZ AR_ID as _key OUTPUT NodeName as SW_NodeName, FQDN as SW_FQDN, Product as SW_App
Thanks,
Do both your lookups have the _key field?
No no, the common key would by AR_ID. AR_ID is already a field on the 2nd dataset and I am setting _key to be AR_ID on the 1st dataset.
If the field is already common, why are you changing it?
|inputlookup ABC
| lookup XYZ AR_ID OUTPUT NodeName as SW_NodeName, FQDN as SW_FQDN, Product as SW_App
This only returns the data from 1st dataset .... no fields from the 2nd dataset.
Are you saying that ABC has a field called _key which has the same values as field AR_ID in XYZ? If so, try this
|inputlookup ABC
| eval AR_ID=_key
| lookup XYZ AR_ID OUTPUT NodeName as SW_NodeName, FQDN as SW_FQDN, Product as SW_App