×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
AZURAKAGAMI
Engager
Member since: ‎11-03-2022
‎11-28-2022
Community Statistics
Posts 2
Solutions 1
Karma Given 1
Karma Received 0
Member Since ‎11-03-2022
View All

Re: How to convert values in a single row with mis...

by in Splunk Search
‎11-03-2022 02:50 AM
‎11-03-2022 02:50 AM
Hi, Giuseppe, Thank you for your quick response but that didn't help. Your search is giving me list of all users that I have in my csv file (which is enormous amount) but I found a solution to this. Thank you for your time anyways. | makeresults | eval Username="User A, User B, User C, User D, User E, User F" | makemv delim="," Username | mvexpand Username | fields - _time | lookup filename.csv Username | search NOT fieldname=*   ... View more

How to convert values in a single row with missing...

by in Splunk Search
‎11-03-2022 01:54 AM
‎11-03-2022 01:54 AM
Hi, How to display what values are missing in my lookup table comparing to actual data?   I have one field with lists of users from my csv file.  I took a specific range of users and trying to find out which of users are missing from my csv file. I cannot find a solution, can someone help me out?   My query. |inputlookup filename.csv |search Username IN (user A,  user B, User C, etc.) |dedup Username |fields Username ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎11-28-2022 08:55 AM
Karma given to
View All