Getting Data In

set search results as the default value of a multi select when the dashboard loads.

japposadas
Explorer

Hi guys, for example i have a search that returns 7 id's. What I wanted to do is set those 7 ids as the default value of a multi select when the dashboard load, is there a way to achieve this one? thanks in advance and more power to everyone 🙂

Tags (2)

jadengoho
Builder

Hi ,
I think there are more good approach to this one ,
But if that will be my case , i will use the
"done" or "finalized" function in XML
link text

in this way you can send the result of the search to a token value
and set them to a default multiselect fields. as $token_name$
in this way your multiselect wont show any default value if the search don't send any token to display.

Please be advise that in this approach other configuration on specific panel UI will lost the or function
and needed to be insert again.
I hope this approach help.

0 Karma

pradeepkumarg
Influencer

Can you add a static value as All and set that as default ?

0 Karma

japposadas
Explorer

Hi gpradeepkumarreddy, thanks for the answer. I've already tried it, but it just sets the first result, i need to set all of the results as the default value of the multiselect.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...