I have the below query:
| inputlookup test.csv
| eval epochtime=strptime(_time, "%a %b %d %H:%M:%S %Y")
| eval desired_time=strftime(epochtime, "%d/%m/%Y")
| rename desired_time as Date
| eval desired_time=strftime(epochtime, "%b%y'")
| rename desired_time as Month
am getting this output in user field.
user
Abcd101
sv23010
ns03621
here i want to remove the user sv48840,ns19075 row in this table.
| where user!="sv48840" AND user!="ns19075"