How to exclude equal values in different columns to obtain stats with different values only? I want to exclude similarities to list only where the user and sysuser are different.
index=example* stuff
| stats count by user, sysuser
*user **sysuser
Bill Bill
Steve Steve
*Dave Jon
Vince Daniel
Any Ideas?
index=example* stuff
| stats count by user, sysuser
| where user!=sysuser