Getting Data In

Duplicate labels causing conflict when importing Data from CSV for Dropdown Menu

curtisLJMU
New Member

Hello,

I am attempting to import data from a CSV file into a dropdown menu. In the CSV there is duplicate entries in the CUS_NAME column, however when I use the DEDUP function I can see in the results that the entries are no longer duplicated. When I put the below search into the drop down search string I get the error message "Duplicate labels causing conflict".

index="MYINDEX" host="MYHOST" source="MYSOURCE.csv" | dedup CUS_NAME

I am using Splunk Enterprise 6.2.2.

If you have any questions, please don't hesitate to ask.

Many thanks,
C

Tags (1)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Make sure you are specifying "CUS_NAME" as the <fieldForLabel> and <FieldForValuealue> fields of the drop down. Then, make your populating search this:

    index="MYINDEX" host="MYHOST" source="MYSOURCE.csv" | stats count by CUS_NAME

Stats is much more efficient in removing dedups.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...