Hi, When you say payloads, do you mean data you have indexed? From what you describe, that looks like a simple dashboard with 1 input and 2 panels: - table to list the transId's - table to list the merchant based on the transId selected on the 1st panel Composing the dashboard structure is quite simple within splunk. https://docs.splunk.com/Documentation/Splunk/8.1.3/SearchTutorial/Createnewdashboard Regarding the contextual drill down (listing data on 2nd panel based on the data selected in the 1st) check the following: https://docs.splunk.com/Documentation/Splunk/8.1.3/Viz/DrilldownIntro If you are having trouble building a simple dashboard and you haven't completed it yet, I would recommend you do the free Splunk fundamentals 1 as it covers, among with other Splunk content, building dashboards like this. https://www.splunk.com/en_us/training/free-courses/splunk-fundamentals-1.html
... View more
