I need to search using the input from csv and compare the results with the same csv containing two columns - and show the difference between them (accountname present and accountname absent) eventcode=4768 contains Account_Name in NTID format eventcode=4769 contains Account_Name in UPN format index=<index_name> host=<host_list> EventCode=4768 OR EventCode=4769 [| inputlookup accountname.csv] | dedup Account_Name | table Account_Name, Ticket_Encryption_Type, Supplied_Realm_Name, Service_Name,Service_ID how do I make the results from above query to show the difference? Appreciate the help. Thanks ... View more