Dashboards & Visualizations

How can a user define a list of field values and save them for use in a dashboard or app?

dimoklis
Explorer

Hello all, apologies for the naive question but i am fairly new into Splunk (v6). So my question is as follows:
1) is it possible through a form for a (end)user to write (or select) a set of values for a field and save them as a group of values for later (e.g. another session)?
2) if (1) is possible, can this -if I may call it - knowledge object- be used as a selection for field value in the same or another form/app (e.g. a search for updating a chart)?

Many thank for your help
Dimoklis.

0 Karma

MHibbin
Influencer

There may be an easier way (I like to take obscure routes) but I would:

  • Create a custom command that maintains an eventtype(s)
  • Link that custom command to the form
  • Have the script to a comma-seperated list and update the eventtype(s).

HTH,

MHibbin

0 Karma
Get Updates on the Splunk Community!

Unleash the Power of Splunk MCP and AI, Meet Us at .Conf 2025, and Find Even More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Professionals: Build Resilience and Visibility with These .conf25 ...

  If you're focused on performance, availability, and full-stack visibility, the Observability track at ...

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...