How do I return values that unmatched column in Lookup table?

[sabeqa]

i am trying to search for urls that are not in my allowed list lookup csv , my csv file is named as url and has 1 column with a header called hostname, below is the search which gives a wrong output.

fgt_webfilter profile=* status=passthrough NOT [ inputlookup url ]

[richgalloway]

Try this.

`fgt_webfilter` profile=* status=passthrough NOT [  | inputlookup url | format ]

[sabeqa]

now i am getting an output but includes some wrong results, (urls in the csv are still appearing)

[harsmarvania57]

Hi @sabeqa,

Try this one fgt_webfilter profile=* status=passthrough NOT [ | inputlookup url | format ]