Dashboards & Visualizations

How to consider multiple status value as one under status filter by applying multiselect filter?

Shrav
Engager

How to specify two similar value with slight differences in their spelling(i.e; "In Progress" and "In progress") as a single option in Multiselect option for particular field i.e;Status - as show in below figure:

Shrav_0-1683522852743.png

 

Labels (1)
Tags (2)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @Shrav,

For this particular sample you can convert all status values to lowercase. Since search works case-insensitive your further searches will run without problem. Please be careful that where command works case-sensitive. 

If this reply helps you an upvote and "Accept as Solution" is appreciated.

Shrav
Engager

@scelikok Thanks for the reply,will try by doing these changes.

 

0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...