Unfortunately, there's too much going on with this query and I am having a hard time following. I edited the portions I think is relevant to your question. In short, I removed the append as I don't know if it is doing what you expect it to do. Start with this, see if it gets you going
index=server ins_status=Ins NOT m_virtual=true
| eval name=lower(name)
| rex field=name "(?<c_hst>[a-z]\w+)"
| fields _time name group m_envi c_hst mode_id
| rename m_envi as env
| eval Lrc="db"
....
....
....
| timechart span=1d values(count) as count by supporting_stt
| rename "supporting" AS r
| rename "Not supporting" AS nr
| addtotals labelfield=T
| eval nrpct=round((nr/T)100,3)
| eval rpct=round((r/T)100,3)
| rename nrpct AS "Not supporting"
| rename rpct AS "supporting"
... View more