Getting Data In

set search results as the default value of a multi select when the dashboard loads.

japposadas
Explorer

Hi guys, for example i have a search that returns 7 id's. What I wanted to do is set those 7 ids as the default value of a multi select when the dashboard load, is there a way to achieve this one? thanks in advance and more power to everyone 🙂

Tags (2)

jadengoho
Builder

Hi ,
I think there are more good approach to this one ,
But if that will be my case , i will use the
"done" or "finalized" function in XML
link text

in this way you can send the result of the search to a token value
and set them to a default multiselect fields. as $token_name$
in this way your multiselect wont show any default value if the search don't send any token to display.

Please be advise that in this approach other configuration on specific panel UI will lost the or function
and needed to be insert again.
I hope this approach help.

0 Karma

pradeepkumarg
Influencer

Can you add a static value as All and set that as default ?

0 Karma

japposadas
Explorer

Hi gpradeepkumarreddy, thanks for the answer. I've already tried it, but it just sets the first result, i need to set all of the results as the default value of the multiselect.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...