Dashboards & Visualizations

How do you pass multiple value tokens from a form input textbox to the search query?

Nadhiyaa
Path Finder

Am I able to pass multiple value tokens from a text box to a search query?

there is no delimiter option for the text box to specify "OR" condition .

"$ipvalue1$" OR "$ipvalue2$" OR "$ipvalue3$" OR "$ipvalue4$"

0 Karma

mayurr98
Super Champion

Have a look at this, might be useful to you:
https://answers.splunk.com/answers/223218/how-to-pass-multiple-parameters-from-a-form-input.html

let me know if this helps!

0 Karma

bangalorep
Communicator

Hello,
You can only send a single value from the text box input. You can however use the multi select option to send multiple tokens

0 Karma

vnravikumar
Champion

Hi @Nadhiyaa

You can try with IN if token was delimited with comma in textbox.

index=_internal sourcetype=splunkd log_level IN ($token$)
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...