I have a search for a dropdown filter. My goal is to select one of the Tags and show in which ID's this tag matches.I'm a bit confused on how can I do that without the duplicates, and how to match this values.
Is there a way?
index= host= sourcetype=csv source=.........\\resul_test.csv
| table PR_Tags, PR_ID
| eval PR_Tags=split(PR_Tags,",")
| mvexpand PR_Tags
| dedup PR_Tags PR_ID