Dashboards & Visualizations

Dashboard with text input panel that accepts multiple text values, preferrably separated by commas

christopheryu
Communicator

I currently have this for my text input that is working just fine (sorry, don't know how to make it show up right):

 input
    input type="text" token="token1" searchWhenChanged="true"
      label CKT ID label
      default * default
 input 

However, instead of inputting just single values or using *, I would like to input and pull up results for multiple CKT IDs:

Before, only able to accept single value as input: CKTA
New, multiple values separated by commas accepted : CKTA, CKTB, CKTD.. etc

Trying to have comma as delimiter for inputs, doesn't matter if have to change to "CKTA,CKTB,CKTD.. etc" or if not possible, any other that will work

Thank you in advance!

Tags (3)
0 Karma

cmerriman
Super Champion

If you are on Splunk 6.x, you can use the IN operator. http://docs.splunk.com/Documentation/Splunk/6.6.0/SearchReference/Search

... CKT_ID IN (value1,value2...)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...