Hello I have the following chart set up and would like to add a drilldown on a value that is currently not contained in the query. <panel> <title>Runtime</title> <chart> <search> <query>sourcetype=avq_test_case type=run task_templ="$task_templ$" result=$result$ db=$db$ | eval t_start=strptime(timestamp_start, "%Y-%m-%d %H:%M:%S") | eval t_end=strptime(timestamp_end, "%F %H:%M:%S") | eval t=(t_end-t_start) | chart max(t) as "time in s" by timestamp_start, result | rename timestamp_start as "Timestamp" | sort t </query> <earliest>$field1.earliest$</earliest> <latest>$field1.latest$</latest> <sampleRatio>1</sampleRatio> </search> <option name="charting.fieldColors">{"Success":0x5BBF46,"Failed":0xF7464A,"Timeout":0x007FFF,"Running":0x64e248,"Submitted":0xd7f453}</option> </chart> </panel> The search has a field defined called uuid, however I cannot refer to it in the drilldown link, I tried $row.uuid$ and $uuid$, neither worked. <drilldown> <link>avaloq_kupima_run_details?form.uuid=$uuid$</link> </drilldown> Is it somehow possible to add a new dimension which can be accessible in the drilldown? Or is it possible to overwrite the value of a bar s.t. I can encode the UUID inside? One option I looked into was to add instead of the result (which is success/failed) an evaluated variable which contains both the result status and the UUID. Problem with that approach is that I cannot assign the field colors as charting.fieldColors does not support wildcards or regex. Any ideas? ... View more