No Results found

[Jamietriplet]

Hello All

Please i need help with the below, i am trying to display a particular column with the below query but i got a 'no results found' output

| inputlookup TagDescriptionLookup.csv
| fields Site UnitName TagName TagDescription Units
| where column = "TagName"
| rename column AS ColumnName
| table ColumnName

Thanks

[Jamietriplet]

Hello @gcusello  thanks for your input,

I need help to write a query that searches through a csv file and allows user to select through a dropdown and displays a result from the CSV file based on user selection.

[gcusello]

Hi @Jamietriplet ,

It's a normal dashboard:

you have to create a dropdown using a search, putting attention that the fields to use in the input search and panel search use the same field name (field names are case sensitive).

Ciao.

Giuseppe

[deepakc]

This should give you the column you want
If you do just, this should have your data and display it

| inputlookup TagDescriptionLookup.csv

#This should just give you the column data

| inputlookup TagDescriptionLookup.csv
| fields TagName

For further info  look here, there are many examples and syntax details

https://docs.splunk.com/Documentation/Splunk/9.2.1/SearchReference/Inputlookup#Examples

[Jamietriplet]

Hello @deepakc thanks for your input

[gcusello]

Hi @Jamietriplet ,

the "column" field isn't present in the available fields (Site UnitName TagName TagDescription Units).

so the where condition isn't verified.

What do you want to check?

Ciao.

Giuseppe