This app adds the "mvdiff" command, which gives users the ability to compare two multivalue fields and find differences/similarities between their values.
... | mvdiff left=<field name> right=<field name>
Outputs three fields: mv_left, mv_right, mv_intersection * mv_left: Values ONLY present in left MV field * mv_right: Values ONLY present in right MV field * mv_intersection: Values present in both MV fields
Version 1.1.0 updates the app to be Python 3 compatible.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.