You can make the meta-data from the data source visible, then set up another search to use the meta-data tokens, such as resultCount for the search for the single value. "ds_tOBtSQ7e": {
...
See more...
You can make the meta-data from the data source visible, then set up another search to use the meta-data tokens, such as resultCount for the search for the single value. "ds_tOBtSQ7e": {
"type": "ds.search",
"options": {
"query": "index=_internal\n| stats count by sourcetype",
"enableSmartSources": true,
"queryParameters": {
"earliest": "-24h@h",
"latest": "now"
}
},
"name": "Search_1"
},
"ds_aRrJ4C9T": {
"type": "ds.search",
"options": {
"query": "| makeresults\n| fields - _time\n| eval count=$Search_1:job.resultCount$",
"queryParameters": {
"earliest": "-24h@h",
"latest": "now"
}
},
"name": "Search_3"
}