Getting Data In

Dashboard Studio - Adding a drop down to filter results after a lookup?

sergioleone
Loves-to-Learn

Hello,

I have a table in dashboard studio with 3 rows; userid, timestamp, and eventtype. I want to filter the table by the first 3 digits of user's IDs when selected from the drop down, for example user IDs are abc123 , abc234, xyz123. I want the filter to have "abc" "xyz" and "all" as the drop down options to filter.

The issue I'm running into is that the userid is mapped from a lookup so it is not in the event data. Any suggestion would be welcomed.

Thank you!

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...