Splunk Search

How to input a file and retrieve output in splunk dashboard?

djroks89
Explorer

Hi Team, I have a query that executes in my dashboard. I want to provide the input as a CSV file(with list of IDs) and execute the query? Could you please help me on how to do that? Currently my input : "5741242" My query : (below)

index="amp" (application="create-order" ) "5741242" | rex field=message "(?msi)(?\{.+\})" | spath input=json_message output=externalReferenceId path=correlationId | spath message | rex field=message "\"name\":\"(?(.[^\"]+))" | spath message | rex field=message "\"externalId\":\"(?(.[^\"]+))" | spath input=json_message output=OrderStatus path=data.version | table externalReferenceId, _time,customername,OrderID,OrderStatus,BookingId,AppointmentId

Thanks in advance! Daniel Joseph

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...