How to create exception list by comparing two tables .

[Hema_Nithya]

How to get the exception from the below tables. Exception is John who is not HR table .

User list from the servers.

Name	ID
Bill	23
Peter	24
john	25

HR Table 

Name	ID
Bill	23
Peter	24
Anita	27

[richgalloway]

Perhaps something like

| inputlookup servers.csv where NOT [|inputlookup HR.csv | format]

[yuanliu]

Using subsearch results in large number of OR operators.  It's probably more economic just doing stats

| inputlookup servers.csv
| eval CSV = "servers"
| inputlookup append=true HR.csv
| fillnull CSV value=HR
| stats values(CSV) as CSV by Name ID
| where mvcount(CSV) == 1 AND CSV == "servers"

(Again, thanks @richgalloway for demonstrating append mode!)