This app adds the "mvdiff" command, which gives users the ability to compare two multivalue fields and find differences/similarities between their values.
... | mvdiff left=<field name> right=<field name>
Outputs three fields: mv_left, mv_right, mv_intersection
* mv_left: Values ONLY present in left MV field
* mv_right: Values ONLY present in right MV field
* mv_intersection: Values present in both MV fields
Version 1.1.0 updates the app to be Python 3 compatible.
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.