Splunk Search

Comparing lists from day1 with the list of day2 and etc. to get difference

igschloessl
Explorer

I need to compare a list consisting of one field from day1 to day2 and get what values where not listed on day 1 but in day2
Comparing this with day 3 and so on.

so for example I have a list with user agents and I want to detect what user agents I have today comparing to the last days. Or comparing one week with another week.

Can I do this automated?

Thank you in advance

0 Karma
Get Updates on the Splunk Community!

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...