Dashboards & Visualizations

Can you help me search a current user in a lookup file?

kingwaras
Engager

Hi all,

I need your help.

I created a lookup file (hierarchy_lookup.csv) with this layout

[Name] [Level]
A 1
B 2
C 3
D 3

I would like to create a dashboard that, in the dropdow list view, the Name presents in the lookup file that has a Level lower that level of current user logged into Splunk.

Ex. My user is B
In the dropdown list will view the C & D user.

Ex. My user is A
In the dropdown list will view the B,C & D user.

I hope I have explained my problem well.

Thanks in advance.

Andrea

0 Karma
1 Solution

somesoni2
Revered Legend

Try this for your drop-down populating search:

| inputlookup hierarchy_lookup.csv 
| where 'Level'<
[| inputlookup hierarchy_lookup.csv 
           | where [| rest /services/authentication/current-context | table username | rename username as Name ] 
| table Level | rename Level as search ]

View solution in original post

0 Karma

somesoni2
Revered Legend

Try this for your drop-down populating search:

| inputlookup hierarchy_lookup.csv 
| where 'Level'<
[| inputlookup hierarchy_lookup.csv 
           | where [| rest /services/authentication/current-context | table username | rename username as Name ] 
| table Level | rename Level as search ]

View solution in original post

0 Karma

kingwaras
Engager

Thank you so much Somesoni2! Working fine!

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!