Getting Data In

set search results as the default value of a multi select when the dashboard loads.

japposadas
Explorer

Hi guys, for example i have a search that returns 7 id's. What I wanted to do is set those 7 ids as the default value of a multi select when the dashboard load, is there a way to achieve this one? thanks in advance and more power to everyone 🙂

Tags (2)

jadengoho
Builder

Hi ,
I think there are more good approach to this one ,
But if that will be my case , i will use the
"done" or "finalized" function in XML
link text

in this way you can send the result of the search to a token value
and set them to a default multiselect fields. as $token_name$
in this way your multiselect wont show any default value if the search don't send any token to display.

Please be advise that in this approach other configuration on specific panel UI will lost the or function
and needed to be insert again.
I hope this approach help.

0 Karma

pradeepkumarg
Influencer

Can you add a static value as All and set that as default ?

0 Karma

japposadas
Explorer

Hi gpradeepkumarreddy, thanks for the answer. I've already tried it, but it just sets the first result, i need to set all of the results as the default value of the multiselect.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...