filtering search to exclude all instances of field 1 for when certain results in field 2

[shouldntdothat]

I have a search that brakes down some router alarms . my fields are Host_IP & Alarm
What I'm trying to do is filter for hosts that only take a specific alarm and do not have certain alarms.
these are state changes . these alarms are SessionUp SessionDown SessionProtChange
Im looking to isolate Hosts that only exhibit SessionUp alarm without having the usual SessionDown and SessionProtChange

Thanks.

[somesoni2 · Accepted solution]

What's your current search? Try something like this

your current search with field Host_IP and Alarm
| stats values(Alarm) as Alarms by Host_IP
| where mvcount(Alarms)=1 AND Alarms="SessionUp"

[shouldntdothat]

Thank You, that helped

[DalJeanis]

@shouldntdothat - We've converted @somesoni2's comment to an answer. Please accept the answer so the question will show as closed.