Hello! I want to make an error monitoring dashboard. I want to have a table with (operation| okOperations/allOperations) and 4 timechart panels with top-error operations, that work dynamically. For the first table I have a search index=prt result=* | eventstats c(eval(result!="")) as totalOp c(eval(result="OK")) as okOp by operation | eval ratio=1-okOp/totalOp|stats max(ratio) as ratio by operation | sort 3 -ratio It returns result table <table> <tr> <td>operation</td> <td>result</td> </tr> <tr> <td>check</td> <td>1</td> </tr> <tr> <td>search</td> <td>0. 2</td> </tr> <tr> <td>buy</td> <td>0.2</td> </tr> </table> Now I want to use operations names in 3 new searches (for 3 panels) like this: |rownum = 1 |timechart count(operation) by result |rownum = 2 |timechart count(operation) by result |rownum = 3 |timechart count(operation) by result I don't want to use | streamstats count as rownum , because it works very slowly. How can I make a search for panels? It will be good to use hidden search and then reuse its results in panels. ... View more

Hello. I want to make a dashboard with statistics about errors that happen in our application. I've made column chart with errorOperationsCount/operationsCount. Then I've added 1 panel on my dashboard and I want to fill it with timechart of results of top-1 operation from first search. I want to make it through hidden search (so that I just complement the first search), but I don't know how to do it. Can you help me, please? My current implementation: 1) chart with errorOperationsCount/operationsCount index=prt | chart dc(trackingId) over operation by result | addtotals | eval ratio = 1 - coalesce(OK,0)/Total | fields operation, ratio | sort limit=25 -ratio 2) first panel (I couldn't come up with how to do it through using result of first search) index=prt result=* [search index=prt result=* | chart dc(trackingId) over operation by result | addtotals | eval ratio = 1 - coalesce(OK,0)/Total | sort limit=1 -ratio |fields operation] |timechart span=1h count by result ... View more