Splunk Search

suggestions for multiselect value when user starts entering text in Multiselect box

ND
Path Finder

Hi All,

 

I want help in multiselect input type.

when user starts typing value in multiselect input the suggestions should auto populate. 

e.g. when I type Splunk - below results should populate

Splunk multiselect

spl

Splunk enterprise 

kindly provide your inputs/ suggestions

 

thanks,

Neha 

0 Karma

ND
Path Finder

Thanks for the input. I am using Dynamic search but its taking too long to populate the data in multiselect input.

can you guide how to deal with this delayed search

0 Karma

vhharanpositka
Path Finder

You can do that by doing 2 changes,

1. Using the dedup command to remove the duplicates.

2. Reduce the Time range of the search.

 

Regards

0 Karma

vhharanpositka
Path Finder

Hi @ND 

 

Based on my understanding,

You have to run the search in the dynamic option in multiselect filter as shown below.

vhharanpositka_0-1636733835316.png

If the search is completed, then the results will start populating if you start typing "spl" then it will show the partial matches in the dropdown as shown below.

vhharanpositka_1-1636734045493.png

 

 

Regards

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...