I have also the same problem.. I want search particular parameter inside the host file with the selectable date drop down Below source code only shows one field and also not giving any output. ++++++++++ <form> <label>ODSEE Backend SEARCH</label> <fieldset autoRun="false" submitButton="true"> <input type="text" token="twguid"> <label>Search ID</label> <default>put your search here</default> <prefix>'twguid'="</prefix> <suffix>"</suffix> </input> </fieldset> <row> <panel> <table> <search> <query> index=auth_odsee* host="*" conn=* twguid=* | search $twguid$ | table '_date' 'twguid' 'host' </query> <earliest>-10m</earliest> <latest>now</latest> </search> </table> </panel> </row> </form> +++++++++++++++++++++ ... View more

if i put this search query, i get the correct total no output, but with "zero" blocked output. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ sourcetype="pihole:log" tag=dns tag=network tag=resolution message_type="Query" |stats count as total, count(eval(query_type="Blocked")) as blocked |eval percent=round((blocked/total)* 100,1) total blocked percent 20433 0 0.0 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ And below results shows the correct no. of blocked outputs, but too many entries outputs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ sourcetype="pihole:log" tag=dns tag=network tag=resolution |stats count as total, count(eval(query_type="Blocked")) as blocked |eval percent=round((blocked/total)* 100,1) total blocked percent 91921 3683 4.0 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ... View more

Thanks, appreciated it.. Have installed it now and able to capture the logs from my pfsense, do you know how to do the search for squid access log, need to filter only the source ip/time/and the website. ... View more