Help on where condition which doesn't works

[jip31]

Hello

The search below returns results but the where condition doesnt works

`wire` 
| eval USERNAME=upper(USERNAME) 
| lookup aps.csv NAME as AP_NAME OUTPUT Building 
| lookup lookup_cmdb_fo_all HOSTNAME as USERNAME output BUILDING_CODE 
| eval Building=upper(Building) 
| stats last(Building) as "GB", last(BUILDING_CODE) as "SB" by USERNAME 
| where NOT ('GB' = 'SB')

I have tried many things

| where NOT ('GB' = 'SB')

| where NOT like ('GB','SB')

| where NOT ("GB"="SB")

what is the pb please?

[richgalloway]

Have you tried | where NOT GB=SB or | where GB!=SB?

[jip31]

with where GB!=SB I have GB events equal SB events and GB events different from GB events and I also tried with | where NOT GB!=SB. And in this case I have just events where GB = SB!