I have two tables. How can I use the inputlookup
command so I only get results of the entries that are NOT in the 2nd table.
Tables 1
A 1 one
A 1 two
A 1 three
B 5 one
C 6 one
2nd table
B Done
C Done
Return
A 1 one
A 1 two
A 1 three
Tried it as follows but does not work.
| inputlookup table1 | eval flag1="1"
| join type=inner [ inputlookup table2 |eval flag2="1" ]
| where isnull(flag2)
Thanks
Try this
| inputlookup table1 | eval flag1="1"
| join type=outer [ inputlookup table2 |eval flag2="1" ]
| where isnull(flag2)
Try this
| inputlookup table1 | eval flag1="1"
| join type=outer [ inputlookup table2 |eval flag2="1" ]
| where isnull(flag2)
Perfect. Thanks