I want to be able to pass multiple values to a field in a dashboard "Endpoint" . Like in the Endpoint Input I want to be able to pass "hostname1 , hostname2 , hostname3" . I dont want to be creating a drilldown. It should be a plain text input with either a "," delimiter or space. Following is my XML code.
Hmm interesting use case. How is the user going to select a value displayed in a text input?
I mean say you have something like - hostname1,hostname2,hostname3 displayed within a single text box, how is a selection on hostname going to be made by the user?
You say that you do not need a drilldown, which I assume to mean that user selection on hostname does not have any processing on the panel based on the selected hostname?
If so, then what is the point of having an input token? I am not understanding your use case.
What i do suggest is using the multiselect option - having something like index=<your index>| dedup host in the search query inside your token
have a drop down token and have your search as something like - index="your index"| stats values(host) as hostname | eval hostname=mvjoin(hostname,",") AND select your inital and default value in the input token settings to this one field.
Since, we are joining all available host values into 1 single field the result will always be one single field with all hostanmes separated by a comma delimiter. Since we select this one field as both initial and default values in the input token the dashboard will always have only this one value