Add certain feilds to an existing query to filter the count

[bapun18]

Below is my existing query :

i want to add ceratin common feilds with different value for the respective indexes .How can i add and get the filter count of events .Please help me in tuning the query ASAP

here's attaching the different feilds for respective indexes  :

[FrankVl]

It's not very clear to me what you are asking for to be honest.

If you want to apply similar filters to your tstats query like you are showing in your second screenshot, take a look at the PREFIX(), CASE() and TERM() directives you can use in the tstats command:

https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Tstats#Use_PREFIX.28.29_to_aggreg...

http://docs.splunk.com/Documentation/Splunk/8.0.5/Search/UseCASEandTERMtomatchphrases

Note: PREFIX() is only available since Splunk 8

[bapun18]

Please ignore the |search xxxxx line below eval command line.

was trying something forgot to remove that