Splunk Search

How to create dynamic inputs using lookup

elrich11
Explorer

I have a dashboard that shows 3 priorities/3panels -Critical, high, low.
the dropdown Input is hardcoded using certain combinations of source name and message, that helps me bifurcate the data into 3 panels,
Now the requirement is that Users could select the SourceName from my last Panel(Other Panel) whenever they want to prioritize any SourceName and add it to any of the 3 panels i.e either Critical,High or Low.

Is there any simple way to achieve this?

Currently, I'm trying to use a csv lookup to get this done But, I'm stuck as there could be 1 source name with different message and both having different priority

For Example:

SrcName Message Priority
ABC Message 1 Critical
ABC Message 2 low

Tags (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...

[Puzzles] Solve, Learn, Repeat: Family Trees

This puzzle (first published here is based on finding grandparents and grandchildren (inspired by a question ...