<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Multiselect Tokens not passing values in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528396#M35861</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/226742"&gt;@Mary666&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;the only thing I see is the delimiter, try to add a space before and after OR:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
    <pubDate>Sat, 07 Nov 2020 07:08:33 GMT</pubDate>
    <dc:creator>gcusello</dc:creator>
    <dc:date>2020-11-07T07:08:33Z</dc:date>
    <item>
      <title>Multiselect Tokens not passing values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528381#M35855</link>
      <description>&lt;P&gt;Hello All,&lt;/P&gt;&lt;P&gt;I need to have the multiselect&amp;nbsp; for Application Name apply its value to the Server Status Multiselect. I have a token for Application Name and have been able to pass it to the other multiselects, but I cant seem to pass it for the Server Status. Any advise would greatly help.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form theme="light"&amp;gt;
   &amp;lt;label&amp;gt;Sample Dashboard&amp;lt;/label&amp;gt;
   &amp;lt;fieldset submitButton="false"&amp;gt;
      &amp;lt;input type="multiselect" token="tok_ApplicationName" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Application Name&amp;lt;/label&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Application Name&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;ApplicationName&amp;lt;/fieldForValue&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Application Name" as ApplicationName | stats count by ApplicationName&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;ApplicationName="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_ServerName" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Server Name&amp;lt;/label&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Server Name&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;ServerName&amp;lt;/fieldForValue&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Domain Name" as ServerName "Application Name" as ApplicationName | search $tok_ApplicationName$ | stats count by ServerName | table ServerName&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;ServerName="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_ServerStatus" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Server Status&amp;lt;/label&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Status&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;Status&amp;lt;/fieldForValue&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup SPL_Server_Status.csv | rename "Application" as ApplicationName | search $tok_ApplicationName$ | stats count by Status | table Status&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;Status="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_ServerNature" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Server Nature&amp;lt;/label&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Server Nature" as ServerNature "Application Name" as ApplicationName | search $tok_ApplicationName$ | stats count by ServerNature | table ServerNature&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;ServerNature="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Server Nature&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;ServerNature&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_DeploymentName" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Deployment Name&amp;lt;/label&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Deployment Name" as deploymentName "Application Name" as ApplicationName | search $tok_ApplicationName$ | stats count by deploymentName | table deploymentName&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;deploymentName="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Deployment Name&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;deploymentName&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_Location" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Location&amp;lt;/label&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Application Name" as ApplicationName | search $tok_ApplicationName$ | stats count by Location | table Location&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;Location="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Location&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;Location&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_OS" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;O.S&amp;lt;/label&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Operating System" as OS "Application Name" as ApplicationName | search $tok_ApplicationName$ | stats count by OS&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;OS="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;O.S&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;OS&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;/input&amp;gt;
      &amp;lt;input type="multiselect" token="tok_CompName" searchWhenChanged="true"&amp;gt;
         &amp;lt;label&amp;gt;Component Name&amp;lt;/label&amp;gt;
         &amp;lt;!-- &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt; --&amp;gt;
         &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
         &amp;lt;valuePrefix&amp;gt;ComponentName="&amp;lt;/valuePrefix&amp;gt;
         &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
         &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
         &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
         &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
         &amp;lt;fieldForLabel&amp;gt;Component Name&amp;lt;/fieldForLabel&amp;gt;
         &amp;lt;fieldForValue&amp;gt;ComponentName&amp;lt;/fieldForValue&amp;gt;
         &amp;lt;search&amp;gt;
            &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Component Name" as ComponentName "Application Name" as ApplicationName | search $tok_ApplicationName$ | stats count by ComponentName&amp;lt;/query&amp;gt;
            &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
            &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
         &amp;lt;/search&amp;gt;
         &amp;lt;!-- &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
&amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt; --&amp;gt;
         &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
      &amp;lt;/input&amp;gt;
   &amp;lt;/fieldset&amp;gt;
   &amp;lt;row&amp;gt;
      &amp;lt;panel&amp;gt;
         &amp;lt;title&amp;gt;Server Count $tok_count$&amp;lt;/title&amp;gt;
         &amp;lt;html&amp;gt;
            &amp;lt;style&amp;gt;.dashboard-row .dashboard-panel h2.panel-title {
background:PALEGOLDENROD !important;
color:black !important;
font-size: 16px !important;
font-family:Helvetica, sans-serif !important;
text-align: center !important;
font-weight: bold !important;
}&amp;lt;/style&amp;gt;
            &amp;lt;div /&amp;gt;
         &amp;lt;/html&amp;gt;
         &amp;lt;table&amp;gt;
            &amp;lt;search&amp;gt;
               &amp;lt;progress&amp;gt;
                  &amp;lt;set token="tok_count"&amp;gt;$job.resultCount$&amp;lt;/set&amp;gt;
               &amp;lt;/progress&amp;gt;
               &amp;lt;query&amp;gt;| inputlookup X_Servers_Report.csv | inputlookup append=t Y_Servers_Report.csv | inputlookup append=t B_Servers_Report.csv | inputlookup append=t J_Servers_Report.csv | inputlookup append=t R_Servers_Report.csv | rename "Deployment Name" as deploymentName "Server Name" as ServerName "Server Nature" as ServerNature "Operating System" as OS "Application Name" as ApplicationName "Component Name" as ComponentName | lookup SPL_Server_Status.csv Server_Name as ServerName OUTPUT Status | fillnull ApplicationName ComponentName Location ServerName ServerNature OS deploymentName Status value=NULL | search $tok_DeploymentName$ $tok_ServerName$ $tok_ServerNature$ $tok_Location$ $tok_OS$ $tok_ApplicationName$ $tok_CompName$ $tok_ServerStatus$ | stats values(Status) as "Server Status" values(ApplicationName) as "Application Name", values(ServerNature) as "Server Nature", values(deploymentName) as "Deployment Name", values(Location) as Location, values(ComponentName) as "Component Name" values(OS) as "O.S" by ServerName | sort ServerName&amp;lt;/query&amp;gt;
               &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
               &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
            &amp;lt;/search&amp;gt;
            &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
         &amp;lt;/table&amp;gt;
      &amp;lt;/panel&amp;gt;
   &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 07 Nov 2020 01:45:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528381#M35855</guid>
      <dc:creator>Mary666</dc:creator>
      <dc:date>2020-11-07T01:45:48Z</dc:date>
    </item>
    <item>
      <title>Re: Multiselect Tokens not passing values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528386#M35858</link>
      <description>&lt;P&gt;Please use code sample (&amp;lt;/&amp;gt;) to post your code for better readability. I have formatted and updated it for now.&lt;/P&gt;&lt;P&gt;Could you please explain what exactly the problem is? Are you getting any error or the values are not detected correctly ?&lt;/P&gt;</description>
      <pubDate>Sat, 07 Nov 2020 01:48:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528386#M35858</guid>
      <dc:creator>renjith_nair</dc:creator>
      <dc:date>2020-11-07T01:48:12Z</dc:date>
    </item>
    <item>
      <title>Re: Multiselect Tokens not passing values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528396#M35861</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/226742"&gt;@Mary666&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;the only thing I see is the delimiter, try to add a space before and after OR:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Sat, 07 Nov 2020 07:08:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528396#M35861</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2020-11-07T07:08:33Z</dc:date>
    </item>
    <item>
      <title>Re: Multiselect Tokens not passing values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528459#M35866</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;I have made some edits to my code and have fixed a few issues along the way. However, I am still not able to pass the Application Name token over to the Server Status input box. I would appriciate any leads.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form theme="light"&amp;gt;
  &amp;lt;label&amp;gt;Example Dashboard&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;input type="multiselect" token="tok_ApplicationName" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Application Name&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Application Name&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;ApplicationName&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;  | inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ]  | rename "Application Name"  as ApplicationName  | stats count by ApplicationName   &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;delimiter&amp;gt;OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;ApplicationName="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_ServerName" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Server Name&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Server Name&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;ServerName&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ] | rename "FQM" as ServerName "Application Name"  as ApplicationName | search $tok_ApplicationName$  | stats count by ServerName  | table ServerName  &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;delimiter&amp;gt;OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;ServerName="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_ServerStatus" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Server Status&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Server Status&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;Status&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;  | inputlookup XYZ_Server_Status.csv  | inputlookup append=t ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv   | rename  "Application" as ApplicationName  "Server_Name" as ServerName | search $tok_ApplicationName$  | stats count by Status   | table Status  &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;Status="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_ServerNature" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Server Nature&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ] | rename "Server Nature" as ServerNature "Application Name"  as ApplicationName | search $tok_ApplicationName$ | stats count by ServerNature   | table ServerNature   &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;ServerNature="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Server Nature&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;ServerNature&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_DeploymentName" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Deployment Name&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt; | inputlookup ABC_Toys_Report.csv  | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ] | rename "Deployment Name" as deploymentName "Application Name"  as ApplicationName | search $tok_ApplicationName$  | stats count by deploymentName  | table deploymentName   &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;deploymentName="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Deployment Name&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;deploymentName&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_Location" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Location&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ] | rename "Application Name"  as ApplicationName | search $tok_ApplicationName$  | stats count by Location  | table Location  &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;Location="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Location&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;Location&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_OS" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;O.S&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ] | rename "Operating System" as OS "Application Name"  as ApplicationName | search $tok_ApplicationName$  | stats count by OS&amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;OS="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;delimiter&amp;gt; OR &amp;lt;/delimiter&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;O.S&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;OS&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="multiselect" token="tok_CompName" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Component Name&amp;lt;/label&amp;gt;
      &amp;lt;!-- &amp;lt;default&amp;gt;All&amp;lt;/default&amp;gt; --&amp;gt;
      &amp;lt;prefix&amp;gt;(&amp;lt;/prefix&amp;gt;
      &amp;lt;valuePrefix&amp;gt;ComponentName="&amp;lt;/valuePrefix&amp;gt;
      &amp;lt;valueSuffix&amp;gt;"&amp;lt;/valueSuffix&amp;gt;
      &amp;lt;delimiter&amp;gt;OR&amp;lt;/delimiter&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;Component Name&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;ComponentName&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv | append [ search  inputlookup XYZ_Server_Status.csv ] | rename "Component Name" as ComponentName "Application Name"  as ApplicationName | search $tok_ApplicationName$  | stats count by ComponentName&amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;!--  &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;suffix&amp;gt;)&amp;lt;/suffix&amp;gt;  --&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Server Count $tok_count$&amp;lt;/title&amp;gt;
      &amp;lt;html&amp;gt;
        &amp;lt;style&amp;gt;
       .dashboard-row .dashboard-panel h2.panel-title {
             background:PALEGOLDENROD  !important;
             color:black !important;
             font-size: 16px !important;
             font-family:Helvetica, sans-serif !important;
             text-align: center !important;
             font-weight: bold !important;
           }

        &amp;lt;/style&amp;gt;
        &amp;lt;div/&amp;gt;
      &amp;lt;/html&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;progress&amp;gt;
            &amp;lt;set token="tok_count"&amp;gt;$job.resultCount$&amp;lt;/set&amp;gt;
          &amp;lt;/progress&amp;gt;
          &amp;lt;query&amp;gt;  | inputlookup ABC_Toys_Report.csv | inputlookup append=t DEF_Toys_Report.csv | inputlookup append=t GHI_Toys_Report.csv | inputlookup append=t JKL_Toys_Report.csv | inputlookup append=t MNO_Toys_Report.csv   | rename "Deployment Name" as deploymentName "FQM" as ServerName "Server Name" as ServerName "Server Nature" as ServerNature   "Operating System" as OS "Application Name" as ApplicationName  "Component Name" as ComponentName  | lookup XYZ_Server_Status.csv Server_Name as ServerName OUTPUT Status  | fillnull ApplicationName ComponentName Location ServerName ServerNature OS deploymentName Status value=NULL   | search  $tok_DeploymentName$ $tok_ServerName$ $tok_ServerNature$   $tok_Location$ $tok_OS$ $tok_ApplicationName$ $tok_CompName$ $tok_ServerStatus$ | stats values(Status) as "Server Status" values(ApplicationName) as "Application Name",  values(ServerNature) as "Server Nature", values(deploymentName) as "Deployment Name", values(Location) as Location, values(ComponentName) as "Component Name" values(OS) as "O.S" by ServerName | sort  ServerName   &amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-15m&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 08 Nov 2020 23:54:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528459#M35866</guid>
      <dc:creator>Mary666</dc:creator>
      <dc:date>2020-11-08T23:54:42Z</dc:date>
    </item>
    <item>
      <title>Re: Multiselect Tokens not passing values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528484#M35868</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/226742"&gt;@Mary666&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;another thing, the search in the multiselect it's strange: you can use | inputlookup only at the beginning of a search (or a sub search), you cannot use more inputlookups one after one.&lt;/P&gt;&lt;P&gt;Wjhat do you want to list in that search?&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Mon, 09 Nov 2020 06:58:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Multiselect-Tokens-not-passing-values/m-p/528484#M35868</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2020-11-09T06:58:23Z</dc:date>
    </item>
  </channel>
</rss>

