Getting Data In

set search results as the default value of a multi select when the dashboard loads.

japposadas
Explorer

Hi guys, for example i have a search that returns 7 id's. What I wanted to do is set those 7 ids as the default value of a multi select when the dashboard load, is there a way to achieve this one? thanks in advance and more power to everyone 🙂

Tags (2)

jadengoho
Builder

Hi ,
I think there are more good approach to this one ,
But if that will be my case , i will use the
"done" or "finalized" function in XML
link text

in this way you can send the result of the search to a token value
and set them to a default multiselect fields. as $token_name$
in this way your multiselect wont show any default value if the search don't send any token to display.

Please be advise that in this approach other configuration on specific panel UI will lost the or function
and needed to be insert again.
I hope this approach help.

0 Karma

pradeepkumarg
Influencer

Can you add a static value as All and set that as default ?

0 Karma

japposadas
Explorer

Hi gpradeepkumarreddy, thanks for the answer. I've already tried it, but it just sets the first result, i need to set all of the results as the default value of the multiselect.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...