I just want to get the left cluster (only Table A )as below picture. How should Splunk search be? tu.
See http://www.innovato.com/splunk/SQLSplunk.html and https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/SQLtoSplunk
search NOT B
not join