A drilldown is a query built using values from a previous query. The ConvertToDrilldownSearch module will build a query automatically from the table or graph that it is nested inside. Unfortunately, this only works well when the query is fairly simple and when you want to see raw events. To build a custom drilldown, we will combine intentions and the nested nature of modules.

<view template="dashboard.html">
<label>Chapter 9 - Drilldown to custom query</label>
<!-- chrome -->
<module
name="HiddenSearch"
layoutPanel="panel_row1_col1"
autoRun="True"
group="Errors by user">
<param name="search">
sourcetype=* loglevel=error | top user
</param&gt...