@ddrillic are you looking for inputlookup --> Filter Unwanted Results --> outputlookup?
@ddrillic are you looking for inputlookup --> Filter Unwanted Results --> outputlookup?
Right @niketnilay ; -) this one did it - | inputlookup <lookup name> | search host != host* | outputlookup <lookup name>
Based on How to remove a row from lookup table and update it?
@niketnilay - please convert to an answer.
Have a similar requirement.
| inputlookup <lookup name> | search host != host* | outputlookup <lookup name>
We want to remove a guid record or line containing the guid from the lookup table so we should filter using = or != ?
| inputlookup abc | search guid= 123456 | outputlookup abc, when tried with this ended up in updating only this record for the entire lookup , so ideally the query should be | inputlookup abc | search guid!= 123456 | outputlookup abc right? please clarify on the filtering of the result @ddrillic @niketn Thanks!