topic Can you help me search a current user in a lookup file? in Dashboards & Visualizations

Can you help me search a current user in a lookup file?

kingwaras — Thu, 29 Nov 2018 17:43:23 GMT

Hi all,

I need your help.

I created a lookup file (hierarchy_lookup.csv) with this layout

[Name] [Level]
A 1
B 2
C 3
D 3

I would like to create a dashboard that, in the dropdow list view, the Name presents in the lookup file that has a Level lower that level of current user logged into Splunk.

Ex. My user is B
In the dropdown list will view the C & D user.

Ex. My user is A
In the dropdown list will view the B,C & D user.

I hope I have explained my problem well.

Thanks in advance.

Andrea

Re: Can you help me search a current user in a lookup file?

somesoni2 — Thu, 29 Nov 2018 19:17:44 GMT

Try this for your drop-down populating search:

| inputlookup hierarchy_lookup.csv 
| where 'Level'<
[| inputlookup hierarchy_lookup.csv 
           | where [| rest /services/authentication/current-context | table username | rename username as Name ] 
| table Level | rename Level as search ]

Re: Can you help me search a current user in a lookup file?

kingwaras — Fri, 30 Nov 2018 08:55:55 GMT

Thank you so much Somesoni2! Working fine!