Hello @livehybrid @PrewinThomas  Thanks a lot for your valuable replies i have tried the same but what's happening is , its fetching the values only one time but when clicked other values it's getting pickedup those values. Providing my code for your reference, could you please take a look and provide your guidance on how to solve this { "type": "splunk.table", "showProgressBar": false, "showLastUpdated": false, "dataSources": { "primary": "ds_GCK97kyD" }, "options": { "backgroundColor": "> themes.defaultBackgroundColor", "tableFormat": { "rowBackgroundColors": "> table | seriesByIndex(0) | pick(tableAltRowBackgroundColorsByTheme)" }, "font": "monospace", "columnFormat": { "Severity": { "data": "> table | seriesByName(\"Severity\") | formatByType(SeverityColumnFormatEditorConfig)", "rowColors": "> table | seriesByName('Severity') | matchValue(SeverityRowColorsEditorConfig)" }, "Sev": { "width": 38, "data": "> table | seriesByName(\"Sev\") | formatByType(SevColumnFormatEditorConfig)", "rowColors": "> table | seriesByName('Sev') | matchValue(SevRowColorsEditorConfig)" }, "Role": { "width": 51 }, "AlertParams": { "width": 223 }, "EventID": { "width": 63 }, "Server": { "width": 104 }, "Team": { "width": 101 } } }, "context": { "SeverityColumnFormatEditorConfig": { "number": { "thousandSeparated": false, "unitPosition": "after" } }, "SeverityRowColorsEditorConfig": [ { "match": 1, "value": "#D41F1F" }, { "match": 2, "value": "#CBA700" }, { "match": 3, "value": "#118832" } ], "SevColumnFormatEditorConfig": { "number": { "thousandSeparated": false, "unitPosition": "after" } }, "SevRowColorsEditorConfig": [ { "match": 2, "value": "#D41F1F" }, { "match": 1, "value": "#CBA700" }, { "match": "", "value": "#118832" } ] }, "title": "", "eventHandlers": [ { "options": { "tokens": [ { "key": "row.event_id.value", "token": "eventid" } ] }, "type": "drilldown.setToken" } ] }   { "type": "splunk.markdown", "options": { "markdown": "selected eventid : $eventid$", "fontColor": "#ffffff", "fontSize": "custom", "customFontSize": 25 }, "context": {}, "showProgressBar": false, "showLastUpdated": false } I am using this markdown just to know whether the interaction is working fine or not , but my actual aim is to parse this table's eventid clicked value into below query `citrix_alerts` | fields - Component,Alert_type,Country,level,provider,message,alert_time | search event_id=$eventid$   ... View more

Thanks for the hint @PrewinThomas  but even after changing it, its not working dynamically whenever we click at panel1 To do the troubleshooting i just put the $event_id$ token in markdown but the clicked value inside panel1 its not showing in markdown as well. could you please help to share what i am doing wrong or share some reference docs for the same. { "type": "splunk.markdown", "options": { "markdown": "$event_id$", "fontColor": "#ffffff", "fontSize": "custom", "customFontSize": 25 }, "context": {}, "showProgressBar": false, "showLastUpdated": false } ... View more

{ "visualizations": { "viz_gsqlcpsd": { "type": "splunk.line", "dataSources": { "primary": "ds_xcdWhjuu" }, "title": "${selected_server:-All Servers} - CPU Usage %" } }, "inputs": { "input_IAwTOhNf": { "options": { "items": [], "token": "selected_server", "defaultValue": "" }, "title": "Server Name", "type": "input.multiselect", "dataSources": { "primary": "ds_dIoNDOrf" }, "showProgressBar": true, "showLastUpdated": true, "context": {} }, "input_mj9iUMvw": { "options": { "defaultValue": "-15m,now", "token": "tr_hMOOrvcD" }, "title": "Time Range Input Title", "type": "input.timerange" } }, "layout": { "type": "grid", "globalInputs": [ "input_VtWuBSik", "input_mj9iUMvw" ], "options": { "backgroundColor": "transparent" }, "structure": [ { "item": "viz_gsqlcpsd", "type": "repeating", "repeatFor": { "input": "input_VtWuBSik" }, "position": { "x": 0, "y": 0, "w": 1200, "h": 400 } } ] }, "dataSources": { "ds_xcdWhjuu": { "type": "ds.search", "options": { "queryParameters": { "earliest": "-24h@h", "latest": "now" }, "query": "index=cto_epe_observability sourcetype=otel_host_metrics measurement=otel_system_cpu_time \r\n| search url IN($selected_server$) OR url=\"default_server\"\r\n| eval state_filter=if(match(state, \"^(idle|interrupt|nice|softirq|steal|system|user|wait)$\"), 1, 0)\r\n| where state_filter = 1\r\n| sort 0 _time url cpu state\r\n| streamstats current=f last(counter) as prev by url cpu state\r\n| eval delta = counter - prev\r\n| where delta >= 0\r\n| bin _time span=1m\r\n| eventstats sum(delta) as total by _time, url, cpu\r\n| eval percent = round((delta / total) * 100, 2)\r\n| eval url_state = url . \"_\" . state \r\n| timechart span=1m avg(percent) by url_state\r\n| foreach * [eval <<FIELD>> = round('<<FIELD>>', 2)]" }, "name": "CPU_Util_Search_1" } }, "ds_dIoNDOrf": { "type": "ds.search", "options": { "query": "index=server | dedup server|table server", "queryParameters": { "earliest": "$global_time.earliest$", "latest": "$global_time.latest$" } }, "name": "Server_Search_1" }, "title": "Test_Multi Line chart" } @kiran_panchavat Thanks for the quick response. Your understanding is right. I believe your code is static , but I want dynamic according to the query results in multi select. Here's my full code ... View more