create report if price values are different

[avikc100]

this is my log 

i need a report like below: where I can see price difference in a single report. I don't want to put those records which has same mainframePrice and discountPrice, only I want to put those records where mainframePrice and discountPrice are different

here I manually entered the individual values to get the report,

[gcusello]

Hi @avikc100 ,

please, next time, send the search in text mode (using the Insert/Edit Code Sample button) so you can mask the sensitive data and we can use it.

At first, don't use search or where after the main search, but put all the conditions as left as possible, possibly in the main search:

index="webmethods_prd"  source="/apps/WebMethods*/IntegrationServer/instances/default/logs/MISC.log" MISC_dynamicPrice mainframePrice!=discountPrice 
| stats count BY mainframePrice discountPrice accountNumber itemId

 otherwise you could add the dc function to identify the different values:

index="webmethods_prd"  source="/apps/WebMethods*/IntegrationServer/instances/default/logs/MISC.log" MISC_dynamicPrice 
| stats 
     dc(mainframePrice) AS mainframePrice_count
     dc(discountPrice) AS discountPrice_count
     first(mainframePrice) AS first_mainframePrice 
     first(discountPrice) AS first_discountPrice 
     last(mainframePrice) AS last_mainframePrice 
     last(discountPrice) AS last_discountPrice 
     BY accountNumber itemId
| where mainframePrice_count>1 OR discountPrice_count>1
| fields - *_count

Ciao.

Giuseppe

[avikc100]

got the solution

index="webmethods_prd"  source="/apps/WebMethods*/IntegrationServer/instances/default/logs/MISC.log" MISC_dynamicPrice |where mainframePrice!=discountPrice |stats count by mainframePrice, discountPrice,accountNumber,itemId