How to club and display the results of two queries in a single dashboard

[sudeep5689]

Hi i am having two search queries with a difference of only the time range. I want to show the results of both the queries in a single dashboard. I s there a way to do it

[sudeep5689]

The solution provided worked out

[493669 · Accepted solution]

Ideally splunk has created two fields - date_month and date_year. If these fields are present then you can use below stats command-

...| stats count by date_month, date_year

[493669]

@sudeep5689, I am converting my comment as Answer. Please accept this if it helps.

[493669]

You can create two separate panel and run each panel query on separate timerange in single dashboard.

[sudeep5689]

i want the results in same panel

[493669]

you can use earliest and latest within your query to run on separate timerange like below example-

index=abc earliest=-1d@d latest=now() |<your calculation>|append [search index=abc earliest=-5d@d latest=now()]

[sudeep5689]

Ok
Can we show the results as separate rows using this combined search. i mean month wise

[sudeep5689]

like count of events i need to show on a monthly basis

[493669]

you can show count on a monthly basis using single query . Is there any other reason for running two query?

[sudeep5689]

in a single query using append right or anyother way you are hinting at

[sudeep5689]

yes need to show comparison across months for count basis.