How to compare different fields having the same value and though in different events?
For example : index1, source1, sourcetype1 has "n" events and index2, source2, sourcetype2 has "m" events .
Now, some fields from sourcetype1(say field1) have the same values as that of some fields of sourcetype2(sayfield2).
I want for field1=field2 list all the other fields of sourcetype2,sourcetype1. The thing is that I have to compare it in different events.
Not a single event is having both field1 and field2.
... View more