Hi @michael92956, it ison't possible to insert a search in an eval command like you would, but it's possible to have the same result with a workaround: index=indexA OR index=indexB | stats BY Username You could also have the information about the index origin adding some option to the stats command: index=indexA OR index=indexB | stats dc(index) AS dc_index values(index) AS index BY Username | eval index_status=if(dc_index=2,"Both Indexes","Only in ".index) | table Username index_status Ciao. Giuseppe ... View more