I have an issue which seems to be simple but after 2 days I'm still struggling. I am attempting to have one search return the number of Logins for a large set of Hosts for both Windows and Linux. I have successfully figured out each Search which will give me the numbers I want, however it only ever returns 1 Stat row. I want to be able to show both numbers plus a total. Here is my search altered slightly for security... index=windows [ inputlookup hosts.csv | fields host] EventCode = 4627 | stats count as winlogins | appendcols [search index=linux [ inputlookup hosts.csv | fields host] type=login | stats count as linuxlogins] | addtotals What I get is each value and a Total but it only has 1 Statistics row so I am unsure how to create a useful Visualization(Report) which will ultimately be placed on a Dashboard. How can I get 1 search to return all 3 values as seperate Statistics so I can post a Report on a Dashboard?
... View more