Splunk Search

How to input a file and retrieve output in splunk dashboard?

djroks89
Explorer

Hi Team, I have a query that executes in my dashboard. I want to provide the input as a CSV file(with list of IDs) and execute the query? Could you please help me on how to do that? Currently my input : "5741242" My query : (below)

index="amp" (application="create-order" ) "5741242" | rex field=message "(?msi)(?\{.+\})" | spath input=json_message output=externalReferenceId path=correlationId | spath message | rex field=message "\"name\":\"(?(.[^\"]+))" | spath message | rex field=message "\"externalId\":\"(?(.[^\"]+))" | spath input=json_message output=OrderStatus path=data.version | table externalReferenceId, _time,customername,OrderID,OrderStatus,BookingId,AppointmentId

Thanks in advance! Daniel Joseph

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...