Dashboards & Visualizations

How do you get a input string to work in Splunk lookup tables?

HealyDPS
Explorer

Hello,

I am trying to create a Splunk search where I have a user add a string of text into a text input and have it go through a python string and submit the string to Splunk and give the results?

I have a search where | inputlookup FSinfo.csv | where Site_Code="AXXA43A" and I get the most of the information I need but it will give me a lot of extra rows that have the same site code. But I am having issues if I don't put them in all caps it wont work either. Is there a way to fix this or would the Python script to make it all caps just be the easier route.

How do you get a Python user input string to work in Splunk? And how would I create a dashboard with just lookup table information?

Thanks for the help and time.

Respectfully,
Spider Splunk Man 😄

0 Karma
1 Solution

HealyDPS
Explorer

Instead of using the "where" command use the "search" command.

View solution in original post

0 Karma

HealyDPS
Explorer

Instead of using the "where" command use the "search" command.

0 Karma

HealyDPS
Explorer

| inputlookup FSinfo.csv | search Site_Code="aaax43a"

I used this instead. That way I could do both upper and lower case when looking through the lookup table. I think with the python script you have to install or use and API to do it.

0 Karma

HealyDPS
Explorer

No worries found out what I could do.

0 Karma

somesoni2
Revered Legend

Great. Would you mind sharing the solution (at least the approach) with the community so that other community members with similar requirement can benefit from it?

0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...