Splunk Search

Field values from look up to query?

Santosh2
Path Finder

Hi All,  I have one dashboard in that I am fetching the results from a input look up file.

I am getting the results but result are getting combined (multiple field values into single event)

But I want them separately like how we have updated in our look up file

In the same way I want to see in splunk.

Lookup file data:

Storage_name     type.     Quality 

Abcd.                       Fty.         100

Efgd.                          Iju.          2000

Ghyu.                         Thu.       3455

Gfhbv.                        Uyhgt.      4556

 

Any suggestions 

 

 

 

 

Labels (2)
Tags (1)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

Can you show your existing SPL 

0 Karma

Santosh2
Path Finder

Hi, i came to know the issue, i was doing a wrong query.

Now the issue resolved.

Thanks in advance 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...