Hi @irkey , you have two choices: use a macro, as hinted by @KendallW , use an eventtype containing the search parameters, for more infos see at https://docs.splunk.com/Documentation/Splunk/9.3.0/...
See more...
Hi @irkey , you have two choices: use a macro, as hinted by @KendallW , use an eventtype containing the search parameters, for more infos see at https://docs.splunk.com/Documentation/Splunk/9.3.0/Knowledge/Abouteventtypes in this way if you created an evenntype called e.g. "somefield" containing somefield IN (a,b,c,d), you can call it using eventtype=somefield Ciao. Giuseppe