Hi , I am comparing two JSON data sets with respect to values of some nested keys in them. The comparison is working fine except that at the end I am getting some blank rows with no data for them in the columns except the diff column that I am inserting. I am including the query that I am using. However, since I am using appendcols in this, so the data sets returned by the search commands would be as below respectively: data1={ \"Sugar\": { \"prod_rate\" : \"50\", \"prod_qual\" : \"Good\" }, \"Rice\": { \"prod_rate\" : \"80\", \"prod_qual\" : \"OK\" }, \"Potato\": { \"prod_rate\" : \"87\", \"prod_qual\" : \"OK\" } } data2="{ \"Sugar\": { \"prod_rate\" : \"50\", \"prod_qual\" : \"Good\" }, \"Wheat\": { \"prod_rate\" : \"50\", \"prod_qual\" : \"Good\" } }"   The actual query with proper search command in place is actually returning some blank rows. How can I remove them from display ? index = data1 | eval grain_name = json_array_to_mv(json_keys(data1)) |mvexpand grain_name |eval data = json_extract(data1, grain_name), qual = json_extract(data, "prod_qual") |table grain_name, qual | appendcols [ search index=data2| eval grain_name2 = json_array_to_mv(json_keys(data2)) | mvexpand grain_name2 | eval data2 = json_extract(data2, grain_name2), qual2 = json_extract(data2, "prod_qual")] |eval diff = if(match (qual, qual2), "Same", "NotSame") |table grain_name, qual, diff ... View more

Hi ,   I have two sets of JSON data. I want to find the keys which are unique in one dataset and also keys which are missing in the same in comparison with the other dataset. My first data set looks as below :   { "iphone": { "price" : "50", "review" : "Good" }, "desktop": { "price" : "80", "review" : "OK" }, "laptop": { "price" : "90", "review" : "OK" } } My second data set looks as below : { "tv": { "price" : "50", "review" : "Good" }, "desktop": { "price" : "60", "review" : "OK" } } Therefore, for the first data set (w.r.t second data set): unique values will be :  iphone and laptop and missing values will be : tv  How can I find out this difference and show then in a table with columns like "uniq_value" and "missing_value" I could only write the query up to this , but this is half part and not what I want: index=product_db | |eval p_name=json_array_to_mv(json_keys(_raw)) |eval p_name = mvfilter(NOT match(p_name, "uploadedBy") AND NOT match(p_name, "time") | mvexpand p_name| table p_name Thanks ... View more