Hi, I have a query that gives a table of records satisfying certain condition. Have another query that gives the same result fields, but with a different search string. Now I want to find the ones that are present in first result and not in the second one Query1 : index=mail sourcetype=testmail "Search condition 1" | table field1 field2 field3 | dedup field1 field2 field3 Query2 : index=mail sourcetype=testmail "Search condition 2" | table field1 field2 field3 | dedup field1 field2 field3 How do I find the one that is only present in Query 1 and then list it as a table with all 3 fields? ... View more