below is my dashboard code, when checkbox is selected i want splunkd* only to be shown in the dropdown else all.
below code seems like is finding checkbox is selected and going to if section , but,sourcetype like "splunkd*" is always evaluating to true/false and also like doesnt seems to work ? any updates?index=_internal | eval field1= if(replace("$applyFilter$",".*(\d)","\1")="1",sourcetype like "splunkd*", ,sourcetype)
--Sree
↧