Continuing from your last comment...
If you just want the max totalCount, then you can use the stats command. Combined with above:
|eval totalCount = cCount + lCount |stats max(totalCount)
If you want all the rows that you had previously, then you can tack it on with eventstats:
|eval totalCount = cCount + lCount
|eventstats max(totalCount) as maxTotal
|table cCount, lCount, totalCount, maxTotal
If you want to single out the row with the max:
|eval totalCount = cCount + lCount
|eventstats max(totalCount) as maxTotal
|where totalCount = maxTotal
|table cCount, lCount, totalCount, maxTotal
... View more