Hi fellows!
I have a scheduled job that output a single host list (in a unique Table) every day. the filename is automaticly named to filename_currentdate.csv
What i'm trying to achieve is compare two .csv from a month apart and show the result in the dashboard. I need this to run as a scheduled job too...
You guys have any idea? I'm kinda stuck!
hello there,
couple related answers here:
https://answers.splunk.com/answers/553238/how-do-i-compare-two-lookups-formed-from-reports-w.html
https://answers.splunk.com/answers/588461/comparing-two-lookup-files.html
in general, try something like this:
| inputlookup <LOOKUP1> | lookup <LOOKUP2> ...
hope it helps