Splunk Dev

How to set multiple values in the Multiselect dropdown token value

Thenmozhi1
Engager

Hi, 

I am trying to change/control many multi-select dropdowns by one Master_multi-select dropdown value/checks.

So I am trying to use more than one value in the set-token tag. But it is not working, if I give 2 values in the Set-token tag. then it will get merge but if I give a single value then it is working fine.

I tried multiple ways like double quotes, single quotes., etc but I could not find the solution

 

Please find the below example and help me to find a solution.

 

<set token="form.Filter1"> "new", "rejected" </set>

out put will be like below. 

Thenmozhi1_0-1633101568540.png

But the expectation is like below

Thenmozhi1_2-1633101857075.png

 

Example in multiselect:-

<input type="dropdown" token="MasterFilter_Token">
<label>MasterFilter</label>
...,

<change>
<condition>

<set token="form.Filter1"> "new", "rejected", "closed" </set>

...,

</condition>
</change>

...,
Thanks in Advance!!!

 

Labels (1)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Thenmozhi1 

 

Try this on change of first dropdown.

<eval token="form.Filter1">split("new,rejected",",")</eval>

 

In case the values are from  the same dropdown then try this.

<eval token="form.Filter1">'form.Filter1'</eval>

 

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...