Here is a  run anywhere example. One of the columns is defined as _hidden so that it wont be displayed in the table. _fields are considered to be internal fields and there is an option to hide them. The second panel displays the value of the taken while clicking on each row { "visualizations": { "viz_oIMuXymL": { "type": "splunk.table", "dataSources": { "primary": "ds_yjf97sDt" }, "options": { "showInternalFields": false }, "eventHandlers": [ { "type": "drilldown.setToken", "options": { "tokens": [ { "token": "HiddenValue", "key": "row._hidden.value" } ] } } ], "title": "" }, "viz_gyqHTdIv": { "type": "splunk.markdown", "options": { "markdown": "**Value of Clicked row : $HiddenValue$**", "backgroundColor": "#ffffff", "fontFamily": "Times New Roman", "fontSize": "extraLarge" } } }, "dataSources": { "ds_yjf97sDt": { "type": "ds.search", "options": { "query": "| makeresults count=5\n| streamstats count\n| eval value=\"Value\".count\n| eval _hidden=\"Hidden\".count\n| fields - count", "queryParameters": { "earliest": "-24h@h", "latest": "now" } }, "name": "Search_1" } }, "defaults": { "dataSources": { "ds.search": { "options": { "queryParameters": { "latest": "$global_time.latest$", "earliest": "$global_time.earliest$" } } } } }, "inputs": {}, "layout": { "type": "grid", "options": { "width": 1440, "height": 960 }, "structure": [ { "item": "viz_oIMuXymL", "type": "block", "position": { "x": 0, "y": 0, "w": 1440, "h": 400 } }, { "item": "viz_gyqHTdIv", "type": "block", "position": { "x": 0, "y": 400, "w": 1440, "h": 400 } } ], "globalInputs": [] }, "description": "", "title": "drilldown_studio" }