Hi,
I'm trying to compare one field "primaryKey" in two sources; "sourceA" and "sourceB". There are other fields for each event, and I need to return results where those other field values don't match for the same primaryKey value in each source...
So if I had:
sourceA and sourceB each contain 1 event with "primaryKey=1"
sourceA's fields are: primaryKey=1, fieldA=apple...and..
sourceB's fields are: primaryKey=1, fieldA=Banana
How do I show that fieldA does or does not match for the same "event" (primaryKey=1) in both sources? They both share sourcetype=csv. Would I do this with a transaction on the primaryKey? if so, how?
I'm eventually going to have to compare 3 sources (sourceA, sourceB, and sourceC) for up to 21 fields in each source-using primaryKey. Figured I should start with figuring out just one. 🙂
Thanks,
Brian
... View more