Splunk Search

Check to compare value with csv contents

Communicator

I'm trying to build a pass/fail check to see if a machine already exists in a csv, as I have a dashboard with a text input where a machine name can be entered.

Below is my search which displays all the machines from the csv, combining them into one line.

alt text

Tags (3)
0 Karma
1 Solution

Super Champion

try adding something like this:

|eval exists=if(like(machine,"%$token$%"),1,0)

where the token is the dashboard text input

View solution in original post

Super Champion

try adding something like this:

|eval exists=if(like(machine,"%$token$%"),1,0)

where the token is the dashboard text input

View solution in original post

Communicator

Thank you for this but how would I add a pass or fail to display this?

0 Karma

Super Champion

what is your desired output, exactly?

do you just want a dashboard panel that says "pass" or "fail"? if so, add |eval exists=if(like(machine,"%$token$%"),"pass","fail")|table exists and display as a single value, maybe?

0 Karma

Communicator

Thank you!!!!

0 Karma