How to combine my two searches into a single base search and have two different post-process transforming searches?

[joydeep741]

I have scenario where:

Search 1:

base search | timechart count(field) by X

Search 2:

base search | timechart count(field2) by Y

Can I some how combine these to in a single base search and then have two post processed searches?

[gyslainlatsa]

hi joydeep741,
try like this:

|set union  [base search | timechart count(field) by X]  [base search | timechart count(field2) by Y]

[gibba]

• List item base search | timechart count(field) by X | appendcols [ search base search | timechart count(field2) by Y]

[joydeep741]

But by this approach i will be hitting the Raw data twice. So the purpose of post processing wont be served.