i have two search results like search1 produce table with 15 columns and search2 produce table with the exactly same column(name). But, i'm not sure about the row values. So i want compare both of these search results and generate mismatched output with all the columns like below...
search1 output like
c1, c2, c3,.......c15 ---->column
r10, r20, r30,.......r150 ------>row1
r11, r21, r31,.......r151 ------>row2
r12, r22, r33,.......r152 ------>row3
search2 output like
c1, c2, c3,.......c15 ---->column
r10, r20, r30,.......r150 ------>row1
r11, r55, r31,.......r151 ------>row2
r12, r22, r20,.......r152 ------>row3
expected output like
r11, r21, r31,.......r151 ------>row2
r12, r22, r33,.......r152 ------>row3
I tried the below query but that didn't help me.
|set diff[search eventtype="e1" | fields f1,f2, ...][search eventtype="e2" | fields f1,f2, ...]
Any help would be much appreciated!
Thanks in Advance,
M
... View more