Hello! I have a lookup in the csv format of about 1900 users. I have a panel in which we show application usage for every user, but it's formatted as a pivot.
I'd like to make a new panel that only shows application usage for the users on this specific lookup table. If it wasn't the case of a pivot being used, I'd have to use an inputlookup followed by an index subsearch, but i'm having a hard time figuring out how to do this with the pivot.
This is the code for the current panel
| pivot Process_Detail
dc(AppVersion) as "#Versions"
dc(ProcUser) as "#Users"
dc(host) as "#Hosts"
splitrow
AppName as Name
filter SessionID > 0
filter AppName is "*"
| eval sortfield = lower ('Name')
| sort limit=0 sortfield
| table
Name
"#Versions"
"#Users"
"#Hosts"
