Splunk Search

How to create dynamic inputs using lookup

elrich11
Explorer

I have a dashboard that shows 3 priorities/3panels -Critical, high, low.
the dropdown Input is hardcoded using certain combinations of source name and message, that helps me bifurcate the data into 3 panels,
Now the requirement is that Users could select the SourceName from my last Panel(Other Panel) whenever they want to prioritize any SourceName and add it to any of the 3 panels i.e either Critical,High or Low.

Is there any simple way to achieve this?

Currently, I'm trying to use a csv lookup to get this done But, I'm stuck as there could be 1 source name with different message and both having different priority

For Example:

SrcName Message Priority
ABC Message 1 Critical
ABC Message 2 low

Tags (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...