Splunk Search
Highlighted

How to compare 2 filename%y%m%d.csv from month appart?

New Member

Hi fellows!

I have a scheduled job that output a single host list (in a unique Table) every day. the filename is automaticly named to filename_currentdate.csv

What i'm trying to achieve is compare two .csv from a month apart and show the result in the dashboard. I need this to run as a scheduled job too...

You guys have any idea? I'm kinda stuck!

0 Karma
Highlighted

Re: How to compare 2 filename%y%m%d.csv from month appart?

SplunkTrust
SplunkTrust

hello there,

couple related answers here:
https://answers.splunk.com/answers/553238/how-do-i-compare-two-lookups-formed-from-reports-w.html
https://answers.splunk.com/answers/588461/comparing-two-lookup-files.html

in general, try something like this:
| inputlookup <LOOKUP1> | lookup <LOOKUP2> ...
hope it helps

0 Karma