thank you woodcock ... View more

thank you so much to4kawa! this helps: |inputlookup report.csv | rename count as "Status*" | eval status='Status*' have a good day and thanks ... View more

i think i got it: (the table INC is new in my list - INC = Incident Number) |inputlookup test_file1.csv | lookup file2.csv accountId OUTPUT Name, City, INC|where accountId!="" | fillnull value=null INC | stats count by INC | where INC="null" ... View more