i have events that has columns like this:
I want to compare them and extract same values to another column. is it possible? thanks in advance.
...|table date1 date2 | eval common = if(date1=date2,date1,null())
use if condition to check if it matches and if not matched then its value will be null
I used this command but nothing happened.
try the updated query