I am trying to find the list of packages installed in all hosts. if any host doesnt have that package installed, I am trying to find those hosts as well. I am using outputlookup and inputlookup to achieve this.
index=module sourcetype=packages_installed source="InstalledSoftware" host="Comp*names"
| eval packageInstall=if(pkgName=="package1","True","False")
| stats values(packageInstall) as "Package Installed" by host Name Version