How to compare two fields between two lookups?

[kiran331]

Hello

How to compare two lookups with by two fields? I have two fields: host and process in both lookup1 and lookup2. I have to compare to get the processes which are not in lookup1 by host?

[somesoni2]

Try like this

|inputlookup lookup1.csv | lookup lookup2.csv host process OUTPUT process as testfield | where isnull(testfield)

OR

|inputlookup lookup1.csv | search NOT [ |inputlookup lookup2.csv | table host process]