How to make a query to search filed by taking output from the the 1st query

[satyajit7]

I have a requirement like, I have to create a dashboard and there will be a input filed called as account Id and after entering the account id it will give desire results.

I have two payloads and one payload contain accountId along with transId. And another payload contain transId and merchantname and etc.

My 1st query will fetch the transid after giving account id as input.

My 2nd query need that tansid to search other filed for the dashboard.

How can I achieve this. Please someone help.

In last i want to use the output of the 1st query as input to the 2nd query and both query need to be in same place.

[diogofgm]

Hi,

When you say payloads, do you mean data you have indexed?

From what you describe, that looks like a simple dashboard with 1 input and 2 panels:

- table to list the transId's
- table to list the merchant based on the transId selected on the 1st  panel

Composing the dashboard structure is quite simple within splunk.
https://docs.splunk.com/Documentation/Splunk/8.1.3/SearchTutorial/Createnewdashboard

Regarding the contextual drill down (listing data on 2nd panel based on the data selected in the 1st) check the following:
https://docs.splunk.com/Documentation/Splunk/8.1.3/Viz/DrilldownIntro

If you are having trouble building a simple dashboard and you haven't completed it yet, I would recommend you do the free Splunk fundamentals 1 as it covers, among with other Splunk content, building dashboards like this.
https://www.splunk.com/en_us/training/free-courses/splunk-fundamentals-1.html