Build splunk dasboard with two different searches into single chart

[bbhandari012]

I would like to have this two chart merge into single chart as a two different line diagram

sourcetype="tomcat-webapp" host="server-notify06*" | rex "(?i)(?P<FIELDNAME>\w+=\[[a-f0-9]+\-[a-f0-9]+\-[a-f0-9]+\-[a-f0-9]+\-[a-f0-9]+\])" |bucket _time span=1h | stats count(FIELDNAME) by _time| rename count(FIELDNAME) as "Count"

sourcetype="tomcat-webapp" host="server-notify06*" | rex "(?i)(?P<FIELDNAME>\w+=\[\w+\])" | bucket _time span=1h | stats count(FIELDNAME) by _time| rename count(FIELDNAME) as "Count"

[bbhandari012]

I have a couple of dashboard. In each dashboard, i would like to have a feature of drop down menu on top of each dashboard, selecting the drop down menu, should redirect me to the different dashboard according to the selection . How can i achieve that feature ? I tried something as below and no luck !!

<input type="dropdown" token="field1">

<label></label>
<default>Select a page to open</default>
<choice value="">Select a page to open</choice>
<choice value="first_dashboard">Link to first dashboard</choice>
<choice value="second_dashboard">Link to second dashboard</choice>
<change>
  <condition value="first_dashboard">


  </condition>
  <condition value="second_dashboard">

  </condition>
</change>



  <chart>
 </chart>

[somesoni2 · Accepted solution]

Try something like this

sourcetype="tomcat-webapp" host="server-notify06*" | rex "(?i)(?P<FIELDNAME1>\\w+=\[[a-f0-9]+\-[a-f0-9]+\-[a-f0-9]+\-[a-f0-9]+\-[a-f0-9]+\])"  | rex "(?i)(?P<FIELDNAME2>\w+=\[\w+\])" | timechart span=1h count(FIELDNAME1) as Count1 count(FIELDNAME2) as Count2

[bbhandari012]

That worked great !!!! Thank you