@dhivyamu
index="_internal" |head 1| eval errorLines=
[ search index=_internal
| stats count(source) as errorLines
|return $errorLines] ,Status=41| eval error_msg = if(Status=="41", errorLines, ""), status = if(Status=="41", "Failed", "Success")
| table errorLines, status, error_msg,Status
... View more