Dashboards & Visualizations

Tokens for multiselect inputs

abovebeyond
Communicator

Hi, im trying to create a multiple select checkbox with parameters

My checkbox looks like:

 <input type="checkbox" token="EventCode">
      <label>Event Code:</label>
      <choice value="'ERROR'">ERROR</choice>
      <choice value="'Success'">Success</choice>
      <choice value="'NoValue'">NoValue</choice>
      <default>'ERROR', 'NoValue'</default>
      <valueSuffix>,</valueSuffix>
   </input> 

My search is a DBQEURY:

 | dbquery "MYDB" "select * 
from [dbo].[Mytable]
where NotificationEventCode in ($EventCode$)
order by id desc"

While try to search my search looks like:
"and NotificationEventCode in ('ERROR', 'NoValue',)

How can i remove the "," in the end?

Thanks!

0 Karma
1 Solution

abovebeyond
Communicator

I use "delimiter" instead , problem solved 🙂

View solution in original post

0 Karma

abovebeyond
Communicator

I use "delimiter" instead , problem solved 🙂

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...