There may be a better answer out there, but here's something to get you going. You should be able to do your search like this:
... | makemv DynamicValues | mvexpand DynamicValues | where match(StaticValues, DynamicValues)
This should yield a separate event for each value of DynamicValues for every event. The "match" function will search a field for a RegEx, but in this case, we're searching one multivalued field (StaticValues) for the the individual entities of DynamicValues. Be sure to check the docs on makemv, so you get your field splits correct.
If you want to add the "OK" and "NOT OK" text to the list and return the events to their original format, you could do the search like this:
... | makemv DynamicValues | mvexpand DynamicValues | eval Status = if(match(StaticValues, DynamicValues), "OK", "NOT OK") | mvcombine DynamicValues
HTH,
Ron
... View more