hi, i need to build a query that fetches me results based on a condition,  index=<myindex>  host=<myhost>  |rex field=_raw ".*TimeInMs=(?<TimeInMs>\d+)" | table host,  TimeInMs here in my case, i need only those host values where TimeInMs is greater than 120000. Appreciate your help in correct query for the same. ... View more

hi team, i have created a lookup table and i have a dashboard which makes use of the values the lookup table. The dashboard has a dropdown which has values from one of the columns in the lookup table. I want to update the dashboard panel based on the selected drop down value and show a trend graph plotting data from another column of the lookup table. Can someone help in building a query for the same. shari <form> <label>Transaction Trend</label> <description>Shows the response time trend graph of a particular transaction</description> <fieldset submitButton="true" autoRun="false"> <input type="dropdown" searchWhenChanged="true" token="transaction"> <label>Transaction</label> <fieldForLabel>Transaction Name</fieldForLabel> <fieldForValue>Transaction Name</fieldForValue> <search> <query>| inputlookup test.csv | stats count by "Transaction Name"</query> </search> </input> </fieldset> <row> <panel> <chart> <title>90% response time trend</title> <search> <query>| inputlookup test.csv |table $transaction$, 90%</query> <earliest>0</earliest> <latest></latest> </search> <option name="charting.chart">line</option> <option name="charting.drilldown">none</option> <option name="refresh.display">progressbar</option> </chart> </panel> </row> </form> ... View more