I have 3 fields: IPAddress, ServiceStatus, BackupStatus.
ServiceStatus field consists of "Services Fine", "Services Stopped", "Services in Error" values.
The backup consists of "Files Uploaded", "Files Upload Pending", "Error in Backup".
I want to get a distinct number of IP addresses present, along with the number of servers having a particular ServiceStatus and BackupStatus.
Example:
Total Servers: 100
Services Fine: 78
Services Stoppped: 14
Services in Error: 8
I could achieve these results in different Searches in the following way:
.. | dedup IPAddress | stats dc(IPAddress) as TotalServers
.. | dedup IPAddress | stats count by ServiceStatus
However, I want to get them in a single search, since I want them to be a part of a single Dashboard Panel.
How can I achieve this?
... View more