Splunk Search

How to create dynamic inputs using lookup

elrich11
Explorer

I have a dashboard that shows 3 priorities/3panels -Critical, high, low.
the dropdown Input is hardcoded using certain combinations of source name and message, that helps me bifurcate the data into 3 panels,
Now the requirement is that Users could select the SourceName from my last Panel(Other Panel) whenever they want to prioritize any SourceName and add it to any of the 3 panels i.e either Critical,High or Low.

Is there any simple way to achieve this?

Currently, I'm trying to use a csv lookup to get this done But, I'm stuck as there could be 1 source name with different message and both having different priority

For Example:

SrcName Message Priority
ABC Message 1 Critical
ABC Message 2 low

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...