How to update multiselect dynamically

[jpbonilla]

Hi Splunk Community,

I'm currently trying to figure out if there is a dynamic way to refresh multiselect values when the assigned token is updated from another panel:

I have a multiselect (IP) with $tip$ as token name

I also have a panel with IPs, and when I click on one of them they update the $tip$ value, applying filters. I would like to update the values in the multiselect showing which IPs are currently selected. Right now I have not been able to find a solution.

Rgds,

JP

[woodcock]

You can include a do-nothing command like ... | rename AUTO_REFRESH AS $refresh_token$ to your populating search and then any time you change refresh_token the list will be regenerated.