Try this search | rest /servicesNS/-/-/saved/searches splunk_server=local | search is_scheduled=1 action.email.to="foo@bar.com" | fields title eai:acl.app ... View more

I believe we're talking about the same thing. I mentioned where it is in the conf file and I think you found where it is in the UI. Let's see if I can get some developers to peek at this as well. ... View more

I'm not a Python expert, but from my testing on Python 2.7 I think you might just have to remove the backslash at the end of this line: isDoneStatus =isDoneStatus.search(searchStatus).groups()[0]\ ... View more

@poorni_p, You could set the values directly in the input <fieldset submitButton="false"> <input type="multiselect" token="team_name"> <label>Teams</label> <choice value="Mark pet,george g">Team A</choice> <choice value="breande k , silk">Team B</choice> <choice value="Team C">Team C</choice> </input> </fieldset> For some reasons if this doesnt work for you, you could use the change event as well <input type="multiselect" token="team_name"> <label>Teams</label> <choice value="Mark pet,george g">Team A</choice> <choice value="breande k , silk">Team B</choice> <choice value="Team C">Team C</choice> <change> <condition label="Team A"> <set token="your token name">your token value</set> </condition> .....other conditions.... </change> </input> Reference : https://docs.splunk.com/Documentation/Splunk/7.3.0/Viz/tokens ... View more

Hi poorni_p, when you say token, you're saying that you have a variable where you put a value from a token, and in this value there are the fields list, is it correct? Could you share your search and possibly an example of your logs? Then, it's not clear which values could have your token, do you have a pair name - fields list? Bye. Giuseppe ... View more

Thanks David, this is awesome when I select a Name (ex: T1 M1 or ..) , How to get roster when i select Team1 and Team2 in the multiselect? the output should be |table Date,Day,T1 M1 ,T1 M2 , T1 M3, T2 M1,T2 M2,T2 M3 i am looking for something like if - else if if($tokSystem$ is Team1 and Team2) return roster for T1 M1 ,T1 M2 , T1 M3, T2 M1,T2 M2,T2 M3 members if($tokSystem$ is Team2 and Team3) return roster for T2 M1,T2 M2,T2 M3, T3 M1,T3 M2,T3 M3 members ... ... View more