Please help me to select the multiple values from the saved search. i need to filter 2 or 3 values out of 6. this is the fieldname targetType =(name, employee, statement)
This is my search :
|inputlookup target_lookup | where targetType LIKE("$value$") | makemv delim="," targetType |table targetType
Saved search :
| savedsearch reportname $value$
This is not working for me. could you please help me to resolve the issue I will be very happy if anyone resolves this issue.
Dyude try this,
| inputlookup target_lookup | search [| gentimes start=-1 | eval targetType="$targetType$" | makemv targetType delim="," | mvexpand targetType | table targetType] | table targetType
run the savedsearch by passing multiple values
| savedsearch reportname targetType="value1,value2"
You can do it by giving
|inputlookup target_lookup | where targetType LIKE("$value1$") OR targetType LIKE("$value2$") OR targetType LIKE("$value3$") | makemv delim="," targetType |table targetType | savedsearch reportname value1=val1 value1=val2 value1=val3
Or just create a macro and use it in a similat way
Then just call