Both above query and below one are working fine
|multisearch [search index=abc earliest=1403508847 latest=1403688907| eval label="Release 1.0"][ search
index=abc earliest=1403688907 latest=now| eval label="Release 1.2"] | eval timeRange = if(1403697000 - _time <= 5*60,
1, 0)|stats count, sum(timeRange) as Last5Min, values(label) as label by ExceptionList | eval IsNew=if
(mvcount(label)=1 AND mvindex(label,0)="Release 1.2","YES","NO") | table ExceptionList , Last5Min, count ,IsNew
... View more