Thank you for the insight! I made this modification on my dashboard. However, the drilldown is still not accurately setting the token.  ... View more

Your second dashboard doesn't have a global_time input - probably waiting for that to be set? ... View more

@lcguilfoil  Did this work for appending to your dropdown? @livehybrid wrote: Hi @lcguilfoil  You need to use "form.rule_token" in the set token like this: <set token="form.rule_token">$click.value$</set>   Updated:  If you want to append to existing selections then use: <eval token="form.rule_token">mvappend($form.rule_token$,$click.value$)</eval> Here is a full example to demonstrate if it helps <form version="1.1" theme="light"> <label>AnswersTesting</label> <fieldset submitButton="false"> <input type="multiselect" token="rule_token" searchWhenChanged="true"> <label>Rule</label> <choice value="*">All Rules</choice> <default>*</default> <fieldForLabel>host</fieldForLabel> <fieldForValue>host</fieldForValue> <search> <query>| tstats count where index=_internal by host</query> <earliest>-7d@h</earliest> <latest>now</latest> </search> <prefix>host IN (</prefix> <delimiter>,</delimiter> <valuePrefix>"</valuePrefix> <valueSuffix>"</valueSuffix> </input> </fieldset> <row> <panel> <table> <search> <query>|tstats count where index=_internal by host</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <option name="drilldown">cell</option> <drilldown> <eval token="form.rule_token">mvappend($form.rule_token$,$click.value$)</eval> </drilldown> </table> </panel> </row> </form> Please let me know how you get on and consider adding karma to this or any other answer if it has helped. Regards Will   ... View more

An event does contain the _time field (even if empty). You cannot remove it from the visualization. The only thing you can do is hide it by declaring it invisible with CSS. ... View more

Hi @livehybrid, I appreciate your comment! That's not exactly what I'm looking for. I don't want to use the Table panel, but instead I want to change the Event panel's display to table. I apologize if what I'm saying is unclear. The best example I can give is the same thing I'm aiming for in the Classic Dashboard: <panel> <event> <search> <query>index=*</query> <earliest>$global_time.earliest$</earliest> <latest>$global_time.latest$</latest> </search> <fields>field, field2, field3</fields> <option name="type">table</option> </event> </panel>   ... View more