Splunk Dev

How to set multiple values in the Multiselect dropdown token value

Thenmozhi1
Engager

Hi, 

I am trying to change/control many multi-select dropdowns by one Master_multi-select dropdown value/checks.

So I am trying to use more than one value in the set-token tag. But it is not working, if I give 2 values in the Set-token tag. then it will get merge but if I give a single value then it is working fine.

I tried multiple ways like double quotes, single quotes., etc but I could not find the solution

 

Please find the below example and help me to find a solution.

 

<set token="form.Filter1"> "new", "rejected" </set>

out put will be like below. 

Thenmozhi1_0-1633101568540.pngThenmozhi1_0-1633101568540.png

But the expectation is like below

Thenmozhi1_2-1633101857075.pngThenmozhi1_2-1633101857075.png

 

Example in multiselect:-

<input type="dropdown" token="MasterFilter_Token">
<label>MasterFilter</label>
...,

<change>
<condition>

<set token="form.Filter1"> "new", "rejected", "closed" </set>

...,

</condition>
</change>

...,
Thanks in Advance!!!

 

Labels (1)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Thenmozhi1 

 

Try this on change of first dropdown.

<eval token="form.Filter1">split("new,rejected",",")</eval>

 

In case the values are from  the same dropdown then try this.

<eval token="form.Filter1">'form.Filter1'</eval>

 

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...