Splunk Search

How to create dynamic inputs using lookup

elrich11
Explorer

I have a dashboard that shows 3 priorities/3panels -Critical, high, low.
the dropdown Input is hardcoded using certain combinations of source name and message, that helps me bifurcate the data into 3 panels,
Now the requirement is that Users could select the SourceName from my last Panel(Other Panel) whenever they want to prioritize any SourceName and add it to any of the 3 panels i.e either Critical,High or Low.

Is there any simple way to achieve this?

Currently, I'm trying to use a csv lookup to get this done But, I'm stuck as there could be 1 source name with different message and both having different priority

For Example:

SrcName Message Priority
ABC Message 1 Critical
ABC Message 2 low

Tags (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Raw Data to Executive-Ready Stories, Faster

Build Data Stories for Every Audience  A dashboard is rarely just a dashboard. It might be the view an ...

Guided Onboarding with Auto-schema Is Now Generally Available

  We are excited to announce the General Availability of Guided Onboarding with Auto-Schematization ...

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...