About SoumyaSengupta9

SoumyaSengupta9 · ‎10-21-2020

I have 2 columns in a table each of which have 1 multivalue field. ColumnA ColumnB abc abc def ghi ghi jkl I want to create a new column where i do an except between the 2 multivalue columns - i.e as per the above table the result should be def, jkl. I know we can use -> | eval columnC = mvfilter(!match(column, searchText)) to achieve the same but the searchText needs to be static & i can't use another fields value. How can i achieve the result i want ?

SoumyaSengupta9 · ‎10-21-2020

@richgalloway i want the final values from the pre-defined list of values which don't appear on the search - not the other way round.

SoumyaSengupta9 · ‎10-21-2020

@richgalloway so the search query should actually be part of the subsearch, i.e - [search query]. The results returned by theses subsearch are intended to be compared with the existing list of pre-defined strings i already have. Basically an EXCEPT operator between pre-defined strings vs search results should give me the results which did not appear in serach. How do i do that ? The query you mentioned above has the search at the outside which in my case needs to be inside

SoumyaSengupta9 · ‎10-20-2020

I have an array of pre-defined string values. I want to check which of these values have not occured at search time for the last 60 mins. I have my query in such a format [ "", "", "", ............ ] NOT IN [ search query ] This does not work as the hardcoded strings are not a search query. What do I do here? Basically I need the list of strings which haven't appeared in the last 60 mins among the logs.

Posts	5
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎10-20-2020

Online Status	Offline
Date Last Visited	‎10-21-2020 10:43 AM

Multivalue Field doubt

Newbie doubt

Multivalue Field doubt

Re: Newbie doubt

Re: Newbie doubt

Newbie doubt