Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to pass a multiselect parameter to a search?

$
0
0
I have a multiselect on session_id and created a search to generate session_id's for a particular user. I created a user text box and passed the `$user$` to the session_id multiselect where it populates that `$user$` session id. I want the option to select specific session_Id as well as select all. I set the default value to ALL as well defined `all=*`. When the search populates, it returns all users' session ID's instead of that particular user. Any thoughts?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>