Hello,
I am attempting to import data from a CSV file into a dropdown menu. In the CSV there is duplicate entries in the CUS_NAME column, however when I use the DEDUP function I can see in the results that the entries are no longer duplicated. When I put the below search into the drop down search string I get the error message "Duplicate labels causing conflict".
index="MYINDEX" host="MYHOST" source="MYSOURCE.csv" | dedup CUS_NAME
I am using Splunk Enterprise 6.2.2.
If you have any questions, please don't hesitate to ask.
Many thanks,
C
Make sure you are specifying "CUS_NAME" as the <fieldForLabel>
and <FieldForValuealue>
fields of the drop down. Then, make your populating search this:
index="MYINDEX" host="MYHOST" source="MYSOURCE.csv" | stats count by CUS_NAME
Stats is much more efficient in removing dedups.