@Ashwini008  <option name="drilldown">cell</option> <drilldown> <condition field="YOUR_COLUMN_NAME"> <link target="_blank">PUT_YOUR_LINK</link> </condition> <condition> <!-- Skip Drilldown Logc--> </condition> </drilldown>   Just confirm above drilldown config  with your code. Thanks KV If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. ... View more

@splunkelz  Can you please try this? YOUR_SEARCH | eval status="" | foreach *_status [| eval status= mvappend(status,"<<FIELD>>"+"="+<<FIELD>>)] | table hostname ip status   My Sample Search : | makeresults | eval _raw="hostname ip database_status internet_status proxy_status server101 192.168.10.2 online online offline server102 192.168.10.3 offline online offline" | multikv forceheader=1 | table hostname ip database_status internet_status proxy_status | eval status="" | foreach *_status [| eval status= mvappend(status,"<<FIELD>>"+"="+<<FIELD>>)] | table hostname ip status     Thanks KV   If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.   ... View more

@bijodev1  May be this will help you. import requests import json # from requests.auth import HTTPBasicAuth # import urllib3 # urllib3.disable_warnings() # # # # search_query={'search':'search earliest = -24h index=_internal | stats count by sourcetype'} # response = requests.post('https://localhost:8000/services/search/jobs/export', data=search_query,verify=False, auth=HTTPBasicAuth('admin', 'admin')) # print("Status = "+str(response.status_code) ) # print("response text = "+str(response.text)) # # json_data = json.loads(str(response.text)) import requests import urllib3 from base64 import b64encode import urllib.parse from csv import reader urllib3.disable_warnings() def fetch_data_using_userid(userid): url = "https://localhost:8089/servicesNS/admin/search/search/jobs/export" payload = { 'search': f'search index=_internal earliest=-1h sourcetype="{userid}" | stats count by sourcetype', 'output_mode': 'json' } safe_payload = urllib.parse.urlencode(payload) userAndPass = b64encode(b"admin:admin123").decode("ascii") headers = { 'Authorization': 'Basic %s' % userAndPass, 'Content-Type': 'application/x-www-form-urlencoded' } response = requests.request("POST", url, headers=headers, data=safe_payload, verify=False) return response.text # open file in read mode with open('user_data.csv', 'r') as read_obj: # pass the file object to reader() to get the reader object csv_reader = reader(read_obj) header = next(csv_reader) if header is not None: # Iterate over each row in the csv using reader object for row in csv_reader: # row variable is a list that represents a row in csv print(row) response_text = fetch_data_using_userid(row[0]) print(response_text)   Thanks KV If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. ... View more