Removing some field values from a mulitiple value field

[youngrap]

hello,

I want to remove the string in field_2 from field_1.
I want it to be like the value in the result field.

Like a list.remove() function in python.

field_1 : mulitiple values
field_2 : strings
result : mulitiple vlaues

field_1	field_2	result
aaa bbb ccc	bbb	aaa ccc
ddd eee	ddd	eee
qqq ddd ggg	ggg	qqq ddd

I tried as below, but don't work.

try #1
| eval result=mvfilter(NOT match(field_1, field_2))

try #2
| eval result=field_1-field_2

thank you.

[ITWhisperer · Accepted solution]

| eval result=mvmap(field_1,if(field_1!=field_2,field_1,null()))

[youngrap]

thank you!!! i solve it.