Providing supplemental values for events

One or more non-transitory computer-readable media having instructions stored thereon, the instructions, when executed by a processor of a computing device, to cause the computing device to perform a method comprising:

• causing display of a set of events that are search results of a search query representing a plurality of commands, each event corresponding to a portion of raw machine data associated with a timestamp, the display of the set of events being in a table format that includes:
• one or more columns, each column comprising data items of an event attribute, the data items being of the set of events;
• and
• a plurality of rows forming cells with the one or more columns, each cell comprising one or more of the data items of the event attribute of a corresponding column;
• causing display of a list of command entries corresponding to the plurality of commands associated with the search query;
• and
• based on a selection of a command entry from the list of command entries, updating the set of events to correspond to commands in the list of commands listed up to the selected command entry.

A computer-implemented system comprising:

• one or more processors;
• and
• memory having instructions stored thereon, the instructions, when executed by the one or more processors, to cause the system to perform a method comprising:
• causing display of a set of events that are search results of a search query representing a plurality of commands, each event corresponding to a portion of raw machine data associated with a timestamp, the display of the set of events being in a table format that includes:
• one or more columns, each column comprising data items of an event attribute, the data items being of the set of events;
• and
• a plurality of rows forming cells with the one or more columns, each cell comprising one or more of the data items of the event attribute of a corresponding column;
• causing display of a list of command entries corresponding to the plurality of commands associated with the search query;
• and
• based on a selection of a command entry from the list of command entries, updating the set of events to correspond to commands in the list of commands listed up to the selected command entry.