I am trying to use my columns named unixtimestart and unixtimeend for a drilldown. but I don't want them to appear in my table. what can I do to use them either way?
Apparently yes - see the second answer of this question: https://answers.splunk.com/answers/26825/drilldown-from-a-hidden-column.html
View solution in original post
worked for me, thank you very much!