Hi,
Currently I am consolidating data from different indexes.
index=application1 ID=$id$ | rename application1_id as ID | TABLE ID, STATUS | append [search
index=application2 ID=$id$ | rename application2_id as ID | TABLE ID, STATUS | append [search
index=application3 ID=$id$ | rename application3_id as ID | TABLE ID, STATUS]
Now I want to provide a checkbox for users to choose applications they want to search.
Ex: If a user selects application1 and 3, then application2 search should not get execute.
I have tried different options with eval(), but not getting any output. Please provide the recommended way!
... View more