Splunk Search

suggestions for multiselect value when user starts entering text in Multiselect box

ND
Path Finder

Hi All,

 

I want help in multiselect input type.

when user starts typing value in multiselect input the suggestions should auto populate. 

e.g. when I type Splunk - below results should populate

Splunk multiselect

spl

Splunk enterprise 

kindly provide your inputs/ suggestions

 

thanks,

Neha 

0 Karma

ND
Path Finder

Thanks for the input. I am using Dynamic search but its taking too long to populate the data in multiselect input.

can you guide how to deal with this delayed search

0 Karma

vhharanpositka
Path Finder

You can do that by doing 2 changes,

1. Using the dedup command to remove the duplicates.

2. Reduce the Time range of the search.

 

Regards

0 Karma

vhharanpositka
Path Finder

Hi @ND 

 

Based on my understanding,

You have to run the search in the dynamic option in multiselect filter as shown below.

vhharanpositka_0-1636733835316.png

If the search is completed, then the results will start populating if you start typing "spl" then it will show the partial matches in the dropdown as shown below.

vhharanpositka_1-1636734045493.png

 

 

Regards

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...