Hi looks like I made some mistakes with explaining what I want to achieve, my apologies. The thing is that I have a lookup with various system families that are different only in numbers in them, for example; familyA01 familyB02 familyB03 Which is one family set, then other it can be: 01-group-B 02-group-B 03-group-C Or any other combo, where the only difference are the numbers inside. But the issue is that some of the assets are not in the lookup AT ALL and I find them in for example wineventlog, like in this example; in lookup: asset,owner pack01C,alan pack03C,alan but in search, AND NOT IN LOOKUP I find: pack02C ^ this asset doesn't exist in lookup at all And I need to find a way to compare that asset to lookup to find what family it belongs in. So far I have searches that find those orphans, based on just comparing what isnt in the lookup and transforming them into pattern, like with the last example into: "pack*C", and I would like to see an output: orphan,rest_of_family,owner pack02C,pack01C pack03C, alan So I can create a report this set just like above to the owner Apologies once again, and I hope that I am more clear this time
... View more