How to change stats on optional field?

[rangarbus]

Hello Folks,

I have the below query on one of my dashboard panel.

Here I pass the IN_BUSINESSDATE field value from dashboard (form input) with default as % and prefix & sufix value as %. So incase user does not provide, the query gets IN_BUSINESSDATE as %%% (its ok)

index=dockerlogs 
| search app_name = ABCD AND logEvent="Delivered"
| spath input=businessKey path=businessDate output=businessDate
| spath input=businessKey output=sourceSystem path=sourceSystem
| eval businessDate=substr(businessDate,1,10)
| where like(businessDate, "$IN_BUSINESSDATE$")
| stats count by businessDate, sourceSystem

Now I would like to change the stats on the query as below if IN_BUSINESSDATE is not provided (meaning value is %%%)

| stats count by sourceSystem

How can I achieve this ?

Thank you!

[ITWhisperer · Accepted solution]

Add a change handler to the input and set another token business_date_entered to "businessDate" if there is an entry and "" otherwise, then use this new token on the stats command

| stats count by $business_date_entered$ sourceSystem