Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Fill into multiselect input by clicking a table element (drill down)

$
0
0
Hi folks, I have tried to create a table drill down to insert elements into a multiselect input, that are already selected. The workflow is: User searches something by using a keyword. He then selects tokens, which are then added to the multiselect input. The mutliselect input however is used as a filter for a new search. Is there a simple way, to add selected elements to a multiselect input by a drill down. Or do I have to use java script in stead. I've already created a dashboard, which has a drilldown on a multivalue field.
$Token$| makeresults | eval _raw="2017-10-15 | INFO | NOTES=\"My app has ID APP-01234 and yours APP-56789\". The dedicated host is Test0815.de." | rex field=_raw max_match=5 "(?PAPP-\d{5})" | rex field=_raw max_match=5 "(?PTest0815.de)" | eval Tokens=mvappend(appid, host) | table _time, _raw, Tokens-24h@hnow1$click.value2$

Viewing all articles
Browse latest Browse all 47296


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>