Splunk Search

How to Left Join is NULL

fearloess
New Member

I just want to get the left cluster (only Table A )as below picture. How should Splunk search be? tu.

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
0 Karma

fearloess
New Member

alt text

0 Karma

to4kawa
Ultra Champion

search NOT B
not join

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...