×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
maz38
New Member
Member since: ‎10-29-2020
‎10-30-2020
Community Statistics
Posts 5
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎10-29-2020
View All

Re: need help in order to compare 2 columns and di...

by in Splunk Search
‎10-29-2020 04:03 AM
‎10-29-2020 04:03 AM
I can't give you any data, my company is working in cybersecurity. ... View more

Re: need help in order to compare 2 columns and di...

by in Splunk Search
‎10-29-2020 04:02 AM
‎10-29-2020 04:02 AM
"comp_name should have values either from index1 or index2 and dc_index should have count 2 for matching records of computer and computer2" I think it's not the good way, because an item can be multiple times in computer1, but there is no empty fields, computer1 and computer2 are always not null or maybe with some dedup on fields? ... View more

Re: need help in order to compare 2 columns and di...

by in Splunk Search
‎10-29-2020 03:02 AM
‎10-29-2020 03:02 AM
OK, I think I need to explain more... a computer can be multiple times in computer1, and a computer2 item is always present in computer1, but not the over way around ... View more

Re: need help in order to compare 2 columns and di...

by in Splunk Search
‎10-29-2020 02:50 AM
‎10-29-2020 02:50 AM
Hi, thank you for your quick answer I think it is not working, I have some computers in both fields that are displayed... I'm waiting 12 results, got 25... ... View more

need help in order to compare 2 columns and displa...

by in Splunk Search
‎10-29-2020 01:52 AM
‎10-29-2020 01:52 AM
Hi, I'm Alex from France as almost everyone here, I need some splunk guru ^^ fields computer and user are in index1, computer2 is in index2 I need a table with computer and related user fields, but only computers which are not in computer2 I can't get my table, please help me! ((index="index1") OR (index="index2")) | streamstats count by computer, user, computer2 | stats values(computer) AS computer, values(computer2) AS computer2 | mvexpand computer | where computer!=computer2 | table computer ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎10-30-2020 03:45 AM