Can you help me search a current user in a lookup file?

[kingwaras]

Hi all,

I need your help.

I created a lookup file (hierarchy_lookup.csv) with this layout

[Name] [Level]
A 1
B 2
C 3
D 3

I would like to create a dashboard that, in the dropdow list view, the Name presents in the lookup file that has a Level lower that level of current user logged into Splunk.

Ex. My user is B
In the dropdown list will view the C & D user.

Ex. My user is A
In the dropdown list will view the B,C & D user.

I hope I have explained my problem well.

Thanks in advance.

Andrea

[somesoni2 · Accepted solution]

Try this for your drop-down populating search:

| inputlookup hierarchy_lookup.csv 
| where 'Level'<
[| inputlookup hierarchy_lookup.csv 
           | where [| rest /services/authentication/current-context | table username | rename username as Name ] 
| table Level | rename Level as search ]

[kingwaras]

Thank you so much Somesoni2! Working fine!