Hi I want a simple query which will return a uncommon values from. currently below query returns union of both Expected and Actual i.e. “Xray,Perform,Report,Hyper,Xray,Perform”
I want result like “Report,Hyper”.

| makeresults 
| eval Expected = "Xray,Perform,Report,Hyper"
| makemv delim="," Expected
| eval Actual = "Xray,Perform"
| makemv delim="," Actual
| eval Combined = mvappend(Expected, Actual)
| makemv delim="," Combined
| stats count by Combined
| where count=1
| table Combined

I tried different options but didnt worked, Please suggest