# Find removed IPs from list in new data

**URL:** <https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067>\
**Category:** Logstash\
**Created:** [July 30, 2021, 10:03am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067 "2021-07-30T10:03:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![YASH\_SHARMA7766](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yash_sharma7766/32/91989_2.png) [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\
**Post date:** [July 30, 2021, 10:03am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067/1 "2021-07-30T10:03:56Z")

</div>

I have a file containing list of IPs and i want to check in the new data if there is any missing IP.

---

<div class="post-metadata">

**Author:** ![AquaX](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aquax/32/92006_2.png) [@AquaX](https://discuss.elastic.co/u/AquaX)\
**Post date:** [July 30, 2021, 1:50pm UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067/2 "2021-07-30T13:50:57Z")

</div>

You are going to need to be much more specific about what your problem is.  
What have you tried so far?  
Do you have an example input?  
Do you have an idea of what you want it to output?

---

<div class="post-metadata">

**Author:** ![YASH\_SHARMA7766](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yash_sharma7766/32/91989_2.png) [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\
**Post date:** [August 3, 2021, 6:25am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067/3 "2021-08-03T06:25:55Z")

</div>

This is my data-set 1 which has IP from 192.168.207.1-10.  
 ![Screenshot 2021-08-03 115112](https://us1.discourse-cdn.com/elastic/original/3X/a/8/a893f59dd4f6f93fd2c17d11fdc60e1d7a1c4dd3.jpeg)

and in data-set 2 , 5 IPs has been removed from this data 192.168.207.1-5.  
 ![Screenshot 2021-08-03 115054](https://us1.discourse-cdn.com/elastic/original/3X/6/1/61fafb2c66611024e9f7fceeacc3c1e606ceb4cf.jpeg)

After ingesting data-set2,I want to see which IPs has been removed from data-set 2 which are present in data-set1.

---

<div class="post-metadata">

**Author:** ![YASH\_SHARMA7766](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yash_sharma7766/32/91989_2.png) [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\
**Post date:** [August 4, 2021, 8:54am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067/4 "2021-08-04T08:54:07Z")

</div>

@AquaX or anyone can help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2021, 8:54am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067/5 "2021-09-01T08:54:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
