Hi Splunkers!
I would like to pass two macros as a token to a base search when multiple values in multiselect is selected,
<done>
<condition match="$index$ == "2A*" AND $index$ == "1T*" AND $index$ == "2S*"">
<set token="standard">true</set>
<set token="scada">true</set>
<set token="aws">true</set>
<set token="index_label">Standard, Scada, AWS</set>
<set token="index_scope">`scada` OR `aws` OR `standard($cmdb_scope$)`</set>
</condition>
<condition match="$index$ == "2A*" AND $index$ == "1T*"">
<set token="standard">true</set>
<unset token="aws"></unset>
<set token="scada">true</set>
<set token="index_label"> Standard, Scada</set>
<set token="index_scope">`scada` OR `standard($cmdb_scope$)`</set>
</condition>
<condition match="$index$ == "2A*" AND $index$ == "2S*"">
<unset token="standard"></unset>
<set token="scada">true</set>
<set token="aws">true</set>
<set token="index_label"> Scada, AWS</set>
<set token="index_scope">`scada` OR `aws`</set>
</condition>
<condition match="$index$ == "2S*" AND $index$ == "1T*"">
<set token="standard">true</set>
<unset token="scada"></unset>
<set token="aws">true</set>
<set token="index_label"> AWS, Standard</set>
<set token="index_scope">`aws` OR `standard($cmdb_scope$)`</set>
</condition>
<condition match="$index$ == "2A*"">
<unset token="standard"></unset>
<set token="scada">true</set>
<unset token="aws"></unset>
<set token="index_label"> Scada</set>
<set token="index_scope">`scada`</set>
</condition>
<condition match="$index$ == "2S*"">
<unset token="standard"></unset>
<unset token="scada"></unset>
<set token="aws">true</set>
<set token="index_label"> AWS</set>
<set token="index_scope">`aws`</set>
</condition>
<condition match="$index$ == "1T*"">
<set token="standard">true</set>
<unset token="scada"></unset>
<unset token="aws"></unset>
<set token="index_label"> Standard</set>
<set token="index_scope"> `standard($cmdb_scope$)`</set>
</condition>
<input type="checkbox" token="index" searchWhenChanged="true">
<label>Choose console</label>
<choice value="1T*"> Standard</choice>
<choice value="2A*"> Scada</choice>
<choice value="2S*"> AWS</choice>
<default>1T*, 2A*,2S* </default>
<initialValue>1T*, 2A*,2S* </initialValue>
<change>
<set token="index_label">$label$</set>
</change>
<change>
<condition match="$index$ == "1T*" AND $index$ == "2A*" AND $index$ == "2S*"">
<set token="standard">true</set>
<set token="scada">true</set>
<set token="aws">true</set>
<set token="index_scope">`scada` OR `standard($cmdb_scope$)` OR `aws`</set>
</condition>
<condition match="$index$ == "1T*" AND $index$ == "2A*"">
<set token="standard">true</set>
<set token="scada">true</set>
<unset token="aws"></unset>
<set token="index_scope">`scada` OR `standard($cmdb_scope$)`</set>
</condition>
<condition match="$index$ == "2A*" AND $index$ == "2S*"">
<unset token="standard"></unset>
<set token="scada">true</set>
<set token="aws">true</set>
<set token="index_scope">`scada` OR `aws`</set>
</condition>
<condition match="$index$ == "2S*" AND $index$ == "1T*"">
<set token="standard">true</set>
<unset token="scada"></unset>
<set token="aws">true</set>
<set token="index_scope">`aws` OR `standard($cmdb_scope$)`</set>
</condition>
<condition match="$index$ == "2A*"">
<unset token="standard"></unset>
<set token="scada">true</set>
<unset token="aws"></unset>
<set token="index_scope">`scada`</set>
</condition>
<condition match="$index$ == "2S*"">
<unset token="standard"></unset>
<unset token="scada"></unset>
<set token="aws">true</set>
<set token="index_scope">`aws`</set>
</condition>
<condition match="$index$ == "1T*"">
<set token="standard">true</set>
<unset token="scada"></unset>
<unset token="aws"></unset>
<set token="index_scope">`standard($cmdb_scope$)`</set>
</condition>
but this is not working, Only one value is passed when selecting two values.
Thanks!