@Archana944    I did some correction in your javascript. Can you please try this?   require([ 'underscore', 'jquery', 'splunkjs/mvc', 'splunkjs/mvc/tableview', 'splunkjs/mvc/simplexml/ready!', ], function(_, $, mvc, TableView) { // Access the "default" token model var tokens = mvc.Components.get("default"); var selected_values_array = []; var query_array = []; var query; var fieldKey = "CheckBox"; var fieldDataStoreKey = "data-sort-key=" + fieldKey; var isSelectAll = false; var submittedTokens = mvc.Components.get('submitted'); var mySearchManager = ""; var SearchManager = require('splunkjs/mvc/searchmanager'); var CustomRangeRenderer = TableView.BaseCellRenderer.extend({ canRender: function(cell) { console.log("IN render",cell.field); return _([fieldKey]).contains(cell.field); }, render: function($td, cell) { console.log("checked",cell.value); var cls = "checkbox"; if (isSelectAll) { cls = "checkbox checked"; } var a = $('<div>').attr({ "id": "chk-sourcetype" + cell.value, "value": cell.value }).addClass(cls).click(function() { if ($(this).attr('class') === "checkbox") { selected_values_array.push($(this).attr('value')); $(this).removeClass(); $(this).addClass("checkbox checked"); } else { $(this).removeClass(); $(this).addClass("checkbox"); var i = selected_values_array.indexOf($(this).attr('value')); if (i != -1) { selected_values_array.splice(i, 1); } // Change the value of a token $mytoken$ } }).appendTo($td); }}); //List of table IDs var tableIDs = ["myTable"]; for (i = 0; i < tableIDs.length; i++) { var sh = mvc.Components.get(tableIDs[i]); if (typeof(sh) != "undefined") { sh.getVisualization(function(tableView) { // Add custom cell renderer and force re-render tableView.table.addCellRenderer(new CustomRangeRenderer()); tableView.table.render(); tableView.on('rendered', function(view) { setTimeout(function() { setCheckAllCheckBox(); }, 500); }); }); } } var SearchA = mvc.Components.get("SearchA"); var SearchAResults = SearchA.data("results"); SearchAResults.on("data", function() { resultArray = SearchAResults.data().rows; searchAFields = SearchAResults.data().fields; var keyIndex = searchAFields.indexOf(fieldKey); searchAValues = []; $.each(resultArray, function(index, value) { searchAValues[index] = value[keyIndex]; }) }); function setCheckAllCheckBox() { // console.log("In setCheckAllCheckBox"); var a = $("[" + fieldDataStoreKey + "]"); // console.log(a); a.html(""); var cls = "checkbox"; if (isSelectAll) { cls = "checkbox checked"; } var temp = $('<div>').attr({ "id": "chk-sourcetype", "value": "All" }).addClass(cls).click(function() { if ($(this).attr('class') === "checkbox") { $(this).removeClass(); $(this).addClass("checkbox checked"); isSelectAll = true; } else { $(this).removeClass(); $(this).addClass("checkbox"); isSelectAll = false; } checkUnCheckAllCheckboxes(); }).appendTo(a); $("[" + fieldDataStoreKey + "]").parent().removeAttr("class"); $("[" + fieldDataStoreKey + "]").removeAttr("data-sort-key"); } function checkUnCheckAllCheckboxes() { console.log($('[id^="chk-sourcetype_"]')); var cls = "checkbox"; selected_values_array = []; if (isSelectAll) { cls = "checkbox checked"; $.each(searchAValues, function(index, value) { selected_values_array.push(value); }) } $('[id^="chk-sourcetype_"]').removeClass(); $('[id^="chk-sourcetype_"]').addClass(cls); } $(document).ready(function() { $("#resubmit").on("click", function(e) { e.preventDefault(); console.log("selectedarray" + selected_values_array); for (q = 0; q < selected_values_array.length; q++) { var checkbox_query = "| makeresults | eval Search_Query=\"" + selected_values_array[q] + "\" | fields - _time | outputlookup append=true IIB_Dashboard_lookup.csv" console.log(checkbox_query) var epoch = (new Date).getTime(); mySearchManager = new SearchManager({ id: "lookup_search" + epoch, earliest_time: "-24h", latest_time: "now", autostart: true, search: checkbox_query, preview: true, cache: false }); } mvc.Components.get("SearchA").startSearch(); query = []; for (u = 0; u < selected_values_array.length; u++) { query[u] = "\"" + selected_values_array[u] + ",RESUBMIT\"" } console.log(query.join(" ")) search_query(query.join(" ")); selected_values_array = []; console.log(selected_values_array); }); $("#archive").on("click", function(e) { e.preventDefault(); console.log("selectedarray" + selected_values_array); for (q = 0; q < selected_values_array.length; q++) { var checkbox_query = "| makeresults | eval Search_Query=\"" + selected_values_array[q] + "\" | fields - _time | outputlookup append=true IIB_Dashboard_lookup.csv" console.log(checkbox_query) var epoch = (new Date).getTime(); mySearchManager = new SearchManager({ id: "lookup_search" + epoch, earliest_time: "-24h", latest_time: "now", autostart: true, search: checkbox_query, preview: true, cache: false }); }; mvc.Components.get("SearchA").startSearch(); query = []; for (u = 0; u < selected_values_array.length; u++) { query[u] = "\"" + selected_values_array[u] + ",ARCHIVE\"" } console.log(query.join(" ")) search_query(query.join(" ")); selected_values_array = []; console.log(selected_values_array); }); function search_query(query) { //var SearchManager = require('splunkjs/mvc/searchmanager'); var epoch = (new Date).getTime(); mySearchManager = new SearchManager({ id: "Soap_test" + epoch, earliest_time: "-24h", latest_time: "now", autostart: true, search: "| soap1 " + query, preview: true, cache: false }); var confirmationMessage = mySearchManager.on('search:done', function(properties) { console.log("DONE!\nSearch job properties:", properties.content.eventCount); return "Job Completed"; }); console.log(confirmationMessage); var myResults = mySearchManager.data("results"); console.log(myResults); myResults.on("data", function() { resultArray_rows = myResults.data().rows; console.log(resultArray_rows) tokens.set("mytoken1", resultArray_rows.join()); submittedTokens.set(tokens.toJSON()); console.log(tokens); }); } }); }); ... View more

@Archana944  I'm assuming you have used js from accepted post. Can you please add setTimeout and try again?   // Add custom cell renderer and force re-render tableView.table.addCellRenderer(new CustomRenderer()); tableView.table.render(); tableView.on('rendered', function(view) { setTimeout(function(){ setCheckAllCheckBox(); },500); });   ... View more

@vijaysri    You can go through this link. https://docs.splunk.com/Documentation/Splunk/8.0.4/SearchReference/Commontimeformatvariables Please  check my sample search with your provided data.   | makeresults | eval date="2020-06-24 03:07:39,997Z|2020-06-24 03:07:39.990Z" , date=split(date,"|") | mvexpand date | eval epochtime = strptime(date,"%Y-%m-%d %M:%H:%S,%3QZ") | eval ReIterated = strftime(epochtime,"%Y-%m-%d %M:%H:%S,%3QZ") | table date epochtime ReIterated   Hope this will help you.   Thanks Kamlesh Vaghela ... View more

@kirrusk    Can you please try this?   YOUR_SEARCH | stats sum(Remediated) as Remediated by Source,Space_id     Sample Search:     | makeresults | eval _raw="Source Remediated Space_id A 45 156 B 46 199 B 98 233 B 8 233 A 9 156 D 3 148" | multikv forceheader=1 | stats sum(Remediated) as Remediated by Source,Space_id     ... View more

@spkriyaz  For providing UnAck feature,  please add below code in my provided example in this answer. XML 1) Add a search manager. <search id="myrevertsearch"> <query> | inputlookup sample_data where Number = "$UnAckID$" | eval Ack="" | append [| inputlookup sample_data where Number != "$UnAckID$"] | sort Number | outputlookup sample_data</query> </search>   2) Add button with "Ack Selected Button". <div> <input type="button" id="mybutton" value="Ack Selected Rows"/> <input type="button" id="myrevertbutton" value="Un Ack Entered Id"/> </div>   JS: 3) Add SearchManager Object and on:done event with other object, // Disabling button while search is running var mysearch = mvc.Components.get('mysearch'); var mainSearch = mvc.Components.get('mainSearch'); var myrevertsearch = mvc.Components.get('myrevertsearch'); myrevertsearch.on('search:done', function (properties) { $("#myrevertbutton").attr('disabled', false); mainSearch.startSearch(); });   4) Add onclick event on UnAck button $(document).ready(function () { //setting up tokens with selected value. $("#mybutton").on("click", function (e) { e.preventDefault(); tokens.set("mytoken", selected_values_array.join()); submittedTokens.set(tokens.toJSON()); $("#mybutton").attr('disabled', true); }); $("#myrevertbutton").on("click", function (e) { e.preventDefault(); myrevertsearch.startSearch(); $("#myrevertbutton").attr('disabled', true); }); });     Thanks Kamlesh Vaghela ... View more

yes @spkriyaz .   So you can use global token to store user information in lookup. like   |inputlookup ram_error.csv | where ID IN ($mytoken$) | eval Ack=now(),User="$env:user$" | append [|inputlookup ram_error.csv | where not ID IN ($mytoken$) ] | sort ID | outputlookup ram_error.csv ... View more

@aseadmin  Can you pleas share some sample event or table same like you shared in question ? So we can help you on  ... View more