Hi,
Try, if you want to count only the values where status is 0, you can do this:
source="XMLExample_ResultEvent_meter.xml" | table EventID EventName Value Status | join type=left EventID [search source="XMLExample_ResultEvent_map.xml" | where EventType="Transaction" | table EventID EventName] | where EventID!=-1 OR status==0 |chart count(Value) AS PASS by EventID
... View more