Hi There!    I need to pass a token form one dashboard to another dashboard when clicking its pie chart  Input in dashboard 1 </input> <input type="multiselect" token="choose_office" searchWhenChanged="true"> <label>Front/Back office</label> <choice value="Front Office">Front Office</choice> <choice value="Back Office">Back Office</choice> <initialValue>Front Office,Back Office</initialValue> <default>Front Office,Back Office</default> <valuePrefix>"</valuePrefix> <valueSuffix>"</valueSuffix> <delimiter>, </delimiter> </input> one of the searches in dashboard 1 `compliance_op` | search office IN ($choose_office$) | chart count by $scope$global | sort $scope$global My link to next dashboard is  <drilldown> <link target="_blank">/app/SAsh/operational_beautiful?form.choose_office=$choose_office$&amp;form.machine=$machine$&amp;form.origin=$origin$&amp;form.country=$country$&amp;form.cacp=$cacp$&amp;form.scope=$scope$</link> </drilldown> Multiselect in dashboard 2 <input type="multiselect" token="office_filter" searchWhenChanged="true"> <label>Front/Back Office</label> <choice value="Front Office">Front Office</choice> <choice value="Back Office">Back Office</choice> <choice value="Unknown">Unknown</choice> <prefix>office IN (</prefix> <suffix>)</suffix> <initialValue>Front Office,Back Office,Unknown</initialValue> <valuePrefix>"</valuePrefix> <valueSuffix>"</valueSuffix> <delimiter>, </delimiter> <change> <eval token="office_filter_drilldown">mvjoin('form.office_filter',"&amp;form.office_filter=")</eval> </change> </input>   search in dashboard 2 `compliance_ap` | search office IN ($choose_office$) | chart count by $scope$global | sort $scope$global I'm facing error in search of dashboard 2. Thanks! ... View more

Hi There!    I would like to pass multiselect values to macros, earlier it was dropdown. The values in multiselect itself an macros which we need pass as a token to search, <input type="checkbox" token="index_scope" searchWhenChanged="true"> <label>Choose console</label> <choice value="1T*">Standard</choice> <choice value="2A*">Scada</choice> <choice value="2S*">AWS</choice> <default>1T*</default> <initialValue>1T*</initialValue> </input>| Here is the search `compliance($index_scope$, now(), $timerange$, $scope$, $origin$, $country$, $cacp$)`   It's not working as expected in multiselect, earlier for dropdown its working good. Thanks in Advance! Manoj Kumar S ... View more

Hi Splunkers,    I'm having the multiselect value that results need pass to a macros,    Can you please help for that?    The need is to pass the multiselect values to token $macros2$, where multiselect values is an macros itself, multi select values 1. value 1 2.  value 2 3. value 3 4. All   search: `macros1(`$macros2$`,  now(), -15d@d, *, virus, *, *, *)` Thanks in Advance! Manoj Kumar S ... View more

Hi Splunkers!    How to assign the pie chart in same vertical if we are having dropdown in one specific pie chart. Having dropdown in one pie chart because of that other pie chart in same row got misaligned, need to have same height of pie charts in the row   Thanks in Advance! ... View more

Hi Splunkers,    I'm having a drodown for index_value with console, standard and aws as options, also having separate pie charts for standard, console and aws, when we click the pie chart in any one of these 3, it will take to another dashboard, over there i need to mark the value of index_valrue of drilldown as standard if we select the standard pie chart in the drilldown of new dashboard that is same for all other two selections. Thanks in Advance, Manoj Kumar S ... View more

How to change the colour of info button in dashboard. ... View more

Hi Splunkers!    I need to extract the specific field which dosent consists of sourcetype in logs, Is there is anything apart from Regex and Spath, i also welcomed, answers in different is needed. Fields to extrcat - OS, OSRelease Thanks in Advance, Manoj Kumar S ... View more