How to Anti join select or Select NOT IN?

[usarios]

Hi.

I have a query A:
index="idx"  "*Processed*" | table phoneNumber
+
query B:
index="idx"  "*Sent*" | table phoneNumber

I need to get all the phoneNumbers from A which are not in B.
How can I build the whole query ?
Thanks in advance!

[ITWhisperer]

There are a few ways to do this - here is one

index="idx"  "*Processed*"
| dedup phoneNumber
| eval processed=1
| append [search index="idx" "*Sent*"
         | dedup phoneNumber
         | processed=-1]
| stats sum(processed) as processed by phoneNumber
| where processed=1
| table phoneNumber