Passing multiselect values to macros

smanojkumar — Tue, 17 Oct 2023 07:41:28 GMT

Hi There!
I would like to pass multiselect values to macros, earlier it was dropdown. The values in multiselect itself an macros which we need pass as a token to search,

<input type="checkbox" token="index_scope" searchWhenChanged="true">
<label>Choose console</label>
<choice value="1T*">Standard</choice>
<choice value="2A*">Scada</choice>
<choice value="2S*">AWS</choice>
<default>1T*</default>
<initialValue>1T*</initialValue>
</input>|

Here is the search

`compliance($index_scope$, now(), $timerange$, $scope$, $origin$, $country$, $cacp$)`

It's not working as expected in multiselect, earlier for dropdown its working good.

Thanks in Advance!
Manoj Kumar S

Re: Passing multiselect values to macros

yuanliu — Tue, 17 Oct 2023 17:26:24 GMT

I'm pretty sure this is the same as Passing multiselect token to the macros. Answer is given there.

topic Re: Passing multiselect values to macros in Splunk Search

Passing multiselect values to macros

Re: Passing multiselect values to macros