Dashboard Studio Multi-value Text Filtering

samp — Sat, 13 Dec 2025 12:48:39 GMT

I'm trying to create SPL so I can enter multiple values on a Domain text filter. For example, I'd like to enter something like *100.15.*;*100.36* and get all IPs that start with 100.15. and 100.36. Can someone provide guidance please?

Re: Splunk Studio Multi-value Text Filtering

livehybrid — Fri, 12 Dec 2025 23:31:56 GMT

Hi @samp

You could use something like this:

This uses a search:

To search for the IPs that match the specific pattern/input - You can replace this with a token e.g. $my_ip_list$ etc as required, and you can move it into the initial search command rather than limit later down the search depending on your requirements.

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

topic Dashboard Studio Multi-value Text Filtering in Dashboards & Visualizations

Dashboard Studio Multi-value Text Filtering

Re: Splunk Studio Multi-value Text Filtering