Sometimes when I am looking at search results, I would like to add several field's values to my search terms. Ideally, I'd like to click on the interesting field values and choose "add to search" so that I get the fieldname=fieldvalue added to my search. But as soon as I click it once, the search is launched and I have to find the interesting value again.
Is there a way to make "add to search" only add to search terms? Then I could launch the search when I am good and ready.
As far as I know, there is know way other than to copy/paste or type out those interesting values into the search box without actually launching the search when clicking. I think, though, that it is a great feature request that you could add. You can do that through http://www.splunk.com/index.php/submit_issue
As far as I know, there is know way other than to copy/paste or type out those interesting values into the search box without actually launching the search when clicking. I think, though, that it is a great feature request that you could add. You can do that through http://www.splunk.com/index.php/submit_issue