Am I able to pass multiple value tokens from a text box to a search query?
there is no delimiter option for the text box to specify "OR" condition .
"$ipvalue1$" OR "$ipvalue2$" OR "$ipvalue3$" OR "$ipvalue4$"
Have a look at this, might be useful to you:
https://answers.splunk.com/answers/223218/how-to-pass-multiple-parameters-from-a-form-input.html
let me know if this helps!
Hello,
You can only send a single value from the text box input. You can however use the multi select option to send multiple tokens
Hi @Nadhiyaa
You can try with IN if token was delimited with comma in textbox.
index=_internal sourcetype=splunkd log_level IN ($token$)