topic Re: How to filter multiple values in saved search using single token in Dashboards & Visualizations

How to filter multiple values in saved search using single token

harish_l — Tue, 09 Jul 2019 15:00:36 GMT

Please help me to select the multiple values from the saved search. i need to filter 2 or 3 values out of 6. this is the fieldname targetType =(name, employee, statement)

This is my search :

|inputlookup target_lookup 
| where targetType LIKE("$value$")
| makemv delim="," targetType
|table targetType

Saved search :

| savedsearch reportname $value$

This is not working for me. could you please help me to resolve the issue I will be very happy if anyone resolves this issue.

Re: How to filter multiple values in saved search using single token

tiagofbmm — Wed, 30 Sep 2020 01:16:13 GMT

You can do it by giving

 |inputlookup target_lookup 
 | where targetType LIKE("$value1$") OR targetType LIKE("$value2$") OR targetType LIKE("$value3$")
 | makemv delim="," targetType
 |table targetType

| savedsearch reportname value1=val1 value1=val2 value1=val3

Or just create a macro and use it in a similat way

Then just call \macro_name(value1)`,`macro_name(value2)`,`macro_name(value3)``

Re: How to filter multiple values in saved search using single token

vinod94 — Tue, 09 Jul 2019 19:19:05 GMT

@harish_l ,

Dyude try this,

| inputlookup target_lookup 
| search 
    [| gentimes start=-1 
    | eval targetType="$targetType$" 
    | makemv targetType delim="," 
    | mvexpand targetType 
    | table targetType] | table targetType

run the savedsearch by passing multiple values

| savedsearch reportname targetType="value1,value2"

Re: How to filter multiple values in saved search using single token

harish_l — Tue, 09 Jul 2019 19:58:13 GMT

@vinod94

I have tried the above query but getting only one value. I need to display 2 values

Re: How to filter multiple values in saved search using single token

harish_l — Tue, 09 Jul 2019 20:10:58 GMT

I am getting only one value using this query. how to get the 2 or 3 values using single token

Re: How to filter multiple values in saved search using single token

tiagofbmm — Tue, 09 Jul 2019 20:16:11 GMT

can you get us a sample of your lookup and what you'd like to have as a result please ?

Re: How to filter multiple values in saved search using single token

harish_l — Tue, 09 Jul 2019 21:01:38 GMT

Lookup data has only one field name with 5 values

FieldsName: targetType
Fielde Value: Count
Duration
Uptime
Down
Messgae

Re: How to filter multiple values in saved search using single token

vinod94 — Wed, 10 Jul 2019 16:42:40 GMT

can u show the savedsearch query.? how are you running it