I need to find difference between two tables and generate an alert when the diffence between Table B and Table A is greater than 3 and publish the diffence in table. Kindly help on this
Table A Table B
Hey @aaa2324 ,
Try renaming the columns in the table and remove the spaces in the column name and then you'll be able to calculate the difference easily. Your query should look something like below:
| rename "Table A" as Table_A "Table B" as Table_B
| eval diff=Table_B-Table_A
And then you can save this search as an alert and have the alert triggered if diff>3.