How to find unmatched value present in the list?

[pal_sumit1]

Let suppose,In a list(owner_name) as owner_name we are having following values,
shyam
ram
Shyam
Shyam

And we have to take out first unmatched value i.e. "ram" and we do not know about what is present in the list.

[somesoni2]

What should be the output if the list is this??

Shyam
shyam
ram
Shyam

[pal_sumit1]

Output should be Ram

[somesoni2]

Not sure if you tried my earlier query. Try this variation as well

your current search giving field owner_name
 | eval temp=mvdedup(lower(owner_name))
 | eval unmatched=if(mvcount(temp)=1,"Only Single type entries present", mvindex(temp,1))

[somesoni2]

Also give this a try.

your current search giving field owner_name
| eval temp=mvdedup(owner_name)
| eval unmatched=if(mvcount(temp)=1,"Only Single type entries present", mvindex(temp,1))