Splunk Search

How to match the products within the same column and the result should be matching productnumber?

MG
Engager

The result should look like the table given below.Need to find the matching product number within customers and the result should be the matching product number, if not null. Can you please suggest

 

Customer_name Product_number Result
Customer1 P1 P1, P2
P2  
P3  
P4  
   
   
Customer 2 P2 P2
P5  
   
Customer 3 P3 Null
P6  
   
   
Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It is not clear how the result is derived from the customer name and product number. Please can you clarify?

0 Karma

MG
Engager

Out of the products, which are all the products that are not common across customers within a single division. How to find that, please

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Please can you clarify your data / example?

Is product number a multivalue field for each customer?

Customer_name Product_number

Customer 1
P1
P2
P3
P4
Customer 2
P2
P5
Customer 3
P3
P6

If so, why is the result for Customer 1 not P1, P3, P4? etc.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...