Hi All,
I have an issue, say where in have file as below
val1 val2 val3 userid
1 a ! u1
2 b @ u1
3 c # u2
4 d $ u2
5 e % u3
6 f ^ u3
7 g & u1
So I would want to display this file in such a way that when user – u1 logs in he sees only
val1 val2 val3 userid
1 a ! u1
2 b @ u1
7 g & u1
When u2 – logs on he sees only
val1 val2 val3 userid
3 c # u2
4 d $ u2
And the below for u3
val1 val2 val3 userid
5 e % u3
6 f ^ u3
Ive tried the below , but am not able to get it working.
|Inputlookup ip_file.csv |where username = [rest splunk_server=local /services/authentication/current-context|eval user_name = username |return user_name]