Hi @Mr_Adate , it isn't a good idea to add a new post, even if on the same topic, to an existing question (especially when closed!) because it's more difficoult to have an answer, so, next time open a new question. Anyway, what do you mean with "compare": do you want to filter the rows of one lookup with the ones of the second? or do you want to know if a value is present in both the lookups or in one of them? if the first, please try something like this: | inputlookup Firewall_NEW_Database.csv WHERE [ | inputlookup Firewall_OLD_Database.csv | rename Firewall AS Hostname | fields Hostname ]
| table Hostname Location Datacenter if the second, please try: | inputlookup Firewall_NEW_Database.csv
| eval lookup="Firewall_NEW_Database.csv"
| append [
| inputlookup Firewall_OLD_Database.csv
| rename Firewall AS Hostname
| eval lookup="Firewall_OLD_Database.csv"
| fields Hostname Location Datacenter lookup ]
| stats
values(Location) AS Location
values(Datacenter) AS Datacenter
dc(lookup) AS lookup_count
values(lookup) AS lookup
BY Hostname
| eval lookup=if(lookup_count=2, "Both lookups",lookup)
| table Hostname Location Datacenter lookup Ciao. Giuseppe
... View more