case-sensitive on subsearch

[simo]

hi

I have this situation

index="idx" [| inputlookup name.csv | table id name ]

idx=

id	name
1a2	aaa
1A2	aaa
12a	bbb

lookup

id	name
1a2	aaa

the result is that it extracts the first 2 lines. How do I extract just the first line?

Thank you

Simone

[ITWhisperer · Accepted solution]

Try something like this

index="idx" 
| where [| inputlookup name.csv | table id name ]