Splunk Search

force dynamic multiselect to set its default to all possible values returned from the search

azulgrana
Path Finder

Hi there!

I have a multi-select input that gets dynamically populated by a search and I would like it to automatically set its default value to all possible values returned from the search. Just to clarify here, I don't want to use "All / *" as the default.

And to clarify even more what I'm looking for, let's say my search returns

Field

A

B

C

I would like my multi-select to automatically set its default value to A B C

Would that be possible?

TIA!

Tags (2)
0 Karma
1 Solution
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!