Dashboards & Visualizations

How to choose all values in multiselect by default?

Splunker6
Engager

Hello,

I would like all the values from my query to be selected by default in my multiselect button.

As the result of my query is not static I can´t use <default>.

Any help is greatly appreciated, thanks.

Labels (1)
0 Karma
1 Solution

Splunker6
Engager

Combining the query result in a list of value separated by commas with:

<row>
<panel depends="$this_token_is_not_set_at_anytime$">
<table>
<search>
<query> Yourquery | mvcombine delim="," myversion | nomv myversion </query>
<done>
<eval token="myversions">split($result.myversion $,",")</eval>
</done>
</search>
</table>
</panel>
</row>

 

And after using this token in my multiselect worked perfectly: 

<default>$myversions$</default>

View solution in original post

0 Karma

Splunker6
Engager

Combining the query result in a list of value separated by commas with:

<row>
<panel depends="$this_token_is_not_set_at_anytime$">
<table>
<search>
<query> Yourquery | mvcombine delim="," myversion | nomv myversion </query>
<done>
<eval token="myversions">split($result.myversion $,",")</eval>
</done>
</search>
</table>
</panel>
</row>

 

And after using this token in my multiselect worked perfectly: 

<default>$myversions$</default>

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...