I have users entering usernames separated by commas into a text box input. I want to run a search on this input that finds any events that have any of the usernames (this is for a base search). So if the user enters username1,username2,username3, I want the search | search user=username1 OR user=username2 OR user=username3 to run. I tried using a multivalue field:
<pre>| eval user2 = $text_box_input$
| makemv delim="," user2
| mvcombine user2 delim="OR user="
| nomv user2
| search user=user2
</pre>
But it wasn't working for me. Any help would be appreciated!
... View more