The idea was helpful but I did it a little differently.
The host selector radio buttons had a field called hostVar and each one was set to a different hostname.
The change that I made was to add after each hostname value 'sourcetype=' so they look like this:
hostVar=host1 sourcetype=
I also added a new radio button for a sourcetype selection that has a value that looks like this:
sourcettype=mysourcetype hostVar=*
That panels already have this so the above works:
host=$hostVar$ my query
I'm not a pro at querying but the above seems to work.
tks for the suggestion
... View more