Hi , I am sorry I am new to Splunk I tried but no luck. I think its confusing you...I m re-framing it again... Logs :  1. 2020-12-09 09:57:48 | absc | THIS IS TEST ONE | -SessionID : SGDGDJEYEUEUU3455 | Search1 Here : {Policynumber:4567 [Assume this is on one log file] 2. 2020-12-09 10:05:39 | ERROR | Exception@Test Details- - Session SGDGDJEYEUEUU3455 [Assume this is on another log file] Here, Index is same we can say index=abcdrf But scenario is , First We need to search session id and policy starts with 45 from Log 1 and in 2nd Log check for Exception@Test Details with same session id in next line And Finally We need count for same session Count. ... View more

Hi , Here are the logs : 2020-12-09 09:57:48 | absc | THIS IS TEST | -SessionID :SGDGDJEYEUEUU3455 | Search1 Here : {Policynumber:4567 2020-12-09 10:05:39 | ERROR | Exception@Test Details- - Session SGDGDJEYEUEUU3455 Here Index is same but logs are different place... In the First query we need to search a. Session id B. and policy starts with some no like 4* 3. In Second search we need to check error/exception with same session id in next line [Same session ID that we captured in first query] Here in pur case session id is :SGDGDJEYEUEUU3455 but in first log it is Session ID and in Second search it is only Session. ... View more

Hi, My scenario is so simple.  1. There is one index  [But logs are in different place, i.e We can use same index with search but in different search window if we do OR , AND operation in single query is not able to find] 2. In the First query we need to search  a. Session id  B. and policy starts with some no like 4* 3. In Second search we need to check error/exception  with  same session id in next line [Same session ID that we captured in first query]   @to4kawa Please help  ... View more

Thankss for your Help !!! ... View more

So We can not add Gauge or any other panel to the same row as that of input dropdown ? My source code is :   <form theme="dark"> <label>SampleDashboard</label> <fieldset submitButton="false"> <input type="text" token="number" searchWhenChanged="true"> <label>Number</label> </input> <input type="dropdown" token="number"> <label>field1</label> <choice value="30">test1</choice> <choice value="50">test2</choice> <choice value="60">test3</choice> <choice value="90">test4</choice> </input> </fieldset> <row> <panel> <chart> <search> <query>|makeresults |eval value=$number$ | table value</query> <earliest>-24h@h</earliest> <latest>now</latest> <progress> <eval token="gaugecolor">if($result.value$ == "100","#006600","0xffe800,0xbf3030")</eval> <eval token="gaugerange">if($result.value$ == "100","0,100","0,".$number$.",100")</eval> </progress> </search> <option name="charting.chart">radialGauge</option> <option name="refresh.display">progressbar</option> <option name="charting.chart.rangeValues">[$gaugerange$]</option> <option name="charting.gaugeColors">[$gaugecolor$]</option> </chart> </panel> </row> </form> ... View more