Compare 2 multivalues fields for matching

[Laxman24]

Hi all,

i need some help in comparing 2 fields, the other field has multi values,

Field 1	Field 2
127.0.0.1	127.0.0.1 127.0.0.2
127.1.1.1	127.1.1.2
127.1.1.2	127.1.1.3 127.1.1.4

I want to compare these 2 fields , when in field 1 has matching value with the field 2 it will return match in a new field im going to make, but in field 2 records isnt always has multi values, im expecting the result as below:

Field 1	Field 2	New_Field
127.0.0.1	127.0.0.1 127.0.0.2	matched
127.1.1.1	127.1.1.2	not matched
127.1.1.2	127.1.1.3 127.1.1.4 127.1.1.5	not matched

im still new with splunk search,

need some advice how i could do the compare and on multi values field as above

really appreciate if someone could help on this

[ITWhisperer · Accepted solution]

| eval New_field=if(isnotnull(mvfind(Field2,Field1)),"Matched","not matched")

[Laxman24]

@ITWhisperer  Thank you so much!!! this seems work!