Dashboards & Visualizations

Studio Dashboard - change delimiter OR Classic Dashboard add Select/Deselect ALL?

Ekichirou
New Member

Hello,

This is my very first post, so corrections are welcomed! 

I am looking for a way to add Select/Deselect ALL in splunk Classic or if possible change the delimiter in Studio.
I have a list of ip/emails and i query them as multiselect from a lookup file. My issue is that in studio the delimiter is "," which does not work for me as i need OR/AND. For the classic, i did fixed it, but i have to select each one-by-one.
Is there any fix/workaround for my issues?

Help is much appreciated, 
Thank you.

Labels (2)
0 Karma

LIS
Path Finder

Hi,

Delimiter doesn't work here(. 

the option only possible:

index=_internal sourcetype IN ($ms2$)

https://docs.splunk.com/Documentation/Splunk/9.0.3/DashStudio/inputMulti

 

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...