To help you tune your questions to be more specific, I stand by my suggestion that you look at the Dashboard Examples App, and find if any of those examples come close to what you are looking to do. If one of the examples gets you close, then you can say what you've attempted, what the result was, and how the result you need is different. When people answer questions in Splunk Answers, that's often what they are looking for, in order to know if they can help or not. ... View more