Importing and querying against a list

Hey, i'm trying to query against a large list, so apposed to copying and pasting data in KQL, and running something

user: ("name","name2","name3")

Is there away of importing that list and making it into a variable? then querying against the variable?

1 Like

If you've the access and credentials, you could possibly
create a script that could do that.

I mention a script because AFAIK, you cant use variables in say Dev Tools.

Although, I've heard that there may be a sql view within Kibana.
Perhaps variables are used there.

What version of Kibana are you using @chin1 ?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.