<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Passing two values in condition based on selection of multiselect values in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667640#M54614</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/236500"&gt;@smanojkumar&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;You could use the "IN" operator for this scenario.&lt;/P&gt;&lt;P&gt;Let's assume the field name is "field1", so you could construct the multi-select input like following,&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="seemanshu_0-1699339715507.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/27973iFEC191207C2F807D/image-size/medium?v=v2&amp;amp;px=400" role="button" title="seemanshu_0-1699339715507.png" alt="seemanshu_0-1699339715507.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;This would have the output of the selected values like following,&lt;/P&gt;&lt;P&gt;field1 IN("value1", "value2"),&lt;/P&gt;&lt;P&gt;which is same as,&lt;/P&gt;&lt;P&gt;field1="value1" OR field1="value2"&lt;/P&gt;&lt;P&gt;If you find the solution helpful, kindly upvote.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Tue, 07 Nov 2023 06:52:36 GMT</pubDate>
    <dc:creator>seemanshu</dc:creator>
    <dc:date>2023-11-07T06:52:36Z</dc:date>
    <item>
      <title>Passing two values in condition based on selection of multiselect values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667636#M54612</link>
      <description>&lt;P&gt;Hi There!&lt;BR /&gt;&amp;nbsp; &amp;nbsp;I would like to pass two values based on the selection of inputs in multiselect drill down,&lt;BR /&gt;&amp;nbsp; &amp;nbsp;Assume I'm having Multiselect options as v1, v2, v3, v4&lt;BR /&gt;&amp;nbsp; &amp;nbsp;Based on the selection&lt;BR /&gt;&lt;BR /&gt;Eg. If v1 and v2 were selected, I would like to pass "value1" "value 2" in "OR" condition to a token of a base search.&lt;BR /&gt;&lt;BR /&gt;Thanks in Advance!&lt;/P&gt;</description>
      <pubDate>Tue, 07 Nov 2023 05:50:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667636#M54612</guid>
      <dc:creator>smanojkumar</dc:creator>
      <dc:date>2023-11-07T05:50:36Z</dc:date>
    </item>
    <item>
      <title>Re: Passing two values in condition based on selection of multiselect values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667640#M54614</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/236500"&gt;@smanojkumar&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;You could use the "IN" operator for this scenario.&lt;/P&gt;&lt;P&gt;Let's assume the field name is "field1", so you could construct the multi-select input like following,&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="seemanshu_0-1699339715507.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/27973iFEC191207C2F807D/image-size/medium?v=v2&amp;amp;px=400" role="button" title="seemanshu_0-1699339715507.png" alt="seemanshu_0-1699339715507.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;This would have the output of the selected values like following,&lt;/P&gt;&lt;P&gt;field1 IN("value1", "value2"),&lt;/P&gt;&lt;P&gt;which is same as,&lt;/P&gt;&lt;P&gt;field1="value1" OR field1="value2"&lt;/P&gt;&lt;P&gt;If you find the solution helpful, kindly upvote.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Tue, 07 Nov 2023 06:52:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667640#M54614</guid>
      <dc:creator>seemanshu</dc:creator>
      <dc:date>2023-11-07T06:52:36Z</dc:date>
    </item>
    <item>
      <title>Re: Passing two values in condition based on selection of multiselect values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667677#M54618</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/111694"&gt;@seemanshu&lt;/a&gt;&amp;nbsp;,&lt;BR /&gt;&amp;nbsp; &amp;nbsp;Thanks for your response!&lt;BR /&gt;&amp;nbsp; &amp;nbsp;&lt;/P&gt;&lt;P&gt;Can you help me here with using condition, there are some existing query which is defined for single value input radio button, I would like to use the same&lt;BR /&gt;&lt;BR /&gt;&amp;lt;condition match="$tok1$==&amp;amp;quot;v1&amp;amp;quot;&amp;gt;&lt;BR /&gt;&amp;lt;set token="value1"&amp;gt;true&amp;lt;/set&amp;gt;&lt;BR /&gt;&amp;lt;condition match==&amp;amp;quot;v2&amp;amp;quot;&amp;gt;&lt;BR /&gt;&amp;lt;set token="value2"&amp;gt;true&amp;lt;/set&amp;gt;&lt;BR /&gt;&lt;BR /&gt;but this is not working , if i use 2 values&lt;BR /&gt;&lt;BR /&gt;&amp;lt;condition match="$tok1$==&amp;amp;quot;v1&amp;amp;quot;&amp;nbsp; AND $tok1$==&amp;amp;quot;v2&amp;amp;quot;&amp;nbsp;&amp;gt;&lt;BR /&gt;&amp;lt;set token="value1"&amp;gt;value1 OR value2&amp;lt;/set&amp;gt;&lt;BR /&gt;&lt;BR /&gt;Thanks in Advance!&lt;/P&gt;</description>
      <pubDate>Tue, 07 Nov 2023 12:41:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-two-values-in-condition-based-on-selection-of/m-p/667677#M54618</guid>
      <dc:creator>smanojkumar</dc:creator>
      <dc:date>2023-11-07T12:41:01Z</dc:date>
    </item>
  </channel>
</rss>

