Dashboards & Visualizations

Passing two values in condition based on selection of multiselect values

smanojkumar
Contributor

Hi There!
   I would like to pass two values based on the selection of inputs in multiselect drill down,
   Assume I'm having Multiselect options as v1, v2, v3, v4
   Based on the selection

Eg. If v1 and v2 were selected, I would like to pass "value1" "value 2" in "OR" condition to a token of a base search.

Thanks in Advance!

Labels (1)
0 Karma

seemanshu
Path Finder

Hi @smanojkumar ,

You could use the "IN" operator for this scenario.

Let's assume the field name is "field1", so you could construct the multi-select input like following,

seemanshu_0-1699339715507.png

This would have the output of the selected values like following,

field1 IN("value1", "value2"),

which is same as,

field1="value1" OR field1="value2"

If you find the solution helpful, kindly upvote.

Thanks

0 Karma

smanojkumar
Contributor

Hi @seemanshu ,
   Thanks for your response!
   

Can you help me here with using condition, there are some existing query which is defined for single value input radio button, I would like to use the same

<condition match="$tok1$==&quot;v1&quot;>
<set token="value1">true</set>
<condition match==&quot;v2&quot;>
<set token="value2">true</set>

but this is not working , if i use 2 values

<condition match="$tok1$==&quot;v1&quot;  AND $tok1$==&quot;v2&quot; >
<set token="value1">value1 OR value2</set>

Thanks in Advance!

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...