@georgerobert,
Assuming that you have some visualization and a drilldown action.
Based on the visualization there would be slight changes but you could use two tokens to have more control on the data.
Please find below an anywhere run example. Have a look and let's know if this is what you are looking for
<dashboard>
<label>Phones</label>
<row>
<panel>
<table>
<search>
<query>|makeresults|eval model="iPhone Samsung Nokia"|makemv model|mvexpand model
|appendcols [|makeresults |eval os="iOS Android Symbian"|makemv os|mvexpand os]</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<option name="drilldown">cell</option>
<drilldown>
<set token="model">$row.model$</set>
<set token="os">$row.os$</set>
</drilldown>
</table>
</panel>
</row>
<row>
<panel>
<html>
<h2>Selected Mode is $model$ and OS is $os$</h2>
</html>
</panel>
</row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂
