Dashboards & Visualizations

How to consider multiple status value as one under status filter by applying multiselect filter?

Shrav
Engager

How to specify two similar value with slight differences in their spelling(i.e; "In Progress" and "In progress") as a single option in Multiselect option for particular field i.e;Status - as show in below figure:

Shrav_0-1683522852743.png

 

Labels (1)
Tags (2)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @Shrav,

For this particular sample you can convert all status values to lowercase. Since search works case-insensitive your further searches will run without problem. Please be careful that where command works case-sensitive. 

If this reply helps you an upvote and "Accept as Solution" is appreciated.

Shrav
Engager

@scelikok Thanks for the reply,will try by doing these changes.

 

0 Karma
Get Updates on the Splunk Community!

Get Schooled with Splunk Education: Explore Our Latest Courses

At Splunk Education, we’re dedicated to providing incredible learning experiences that cater to every skill ...

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...