Try adding following at the end of your search If your current search result contains _time and one field say "count" | eventstats sum(count) as TotalCount   If your search result contains _time and several dynamic column names, | addtotals fieldname="Totalcount" ... View more

hi @ashok968 have a look into this,, https://answers.splunk.com/answers/565349/dashboard-conditional-drill-down-with-form-input-t-1.html ... View more

Hi , Thanks for responding i have tried above but i was not able to get the result. My search result is resulting the below text in one filed.Now i want to high late the http link and if i click on that respective page should open. *Net banking is not working properly https:\xxyz.com* Thanks in advance ... View more