Thanks @richgalloway . That is what I was looking for! ... View more

@inventsekar did you mean easiest and latest are not the Splunk value?  ... View more

@inventsekar  why don't we have both token with time rage not related to each other? I really don't get it. ... View more

It did not work since it didnt group different areas from date range. I am thinking about using Dropdown menu, but I don't know how to connect the token into the search query <input type="dropdown" token="time_token" searchWhenChanged="true"> <label>Select any Time Period</label> <choice value="earliest=-720d@d latest=now">Today</choice> <choice value="earliest=now latest=+@90d@d">Next 3 months</choice> <choice value="earliest=now latest=+@180d@d">Next 6 months</choice> <choice value="earliest=now latest=+@270d@d">Next 9 months</choice> <choice value="earliest=now latest=+@360d@d">Next 12 months</choice> <choice value="earliest=now latest=+540d@d">Next 18 months</choice> <choice value="earliest=now latest=+730d@d">Next 24 months</choice> <default>earliest=-720d@d latest=now</default> ... View more

That one did not work. The previous one worked but it gave the result separately area by area, not group some areas together. | chart count over Area BY epochdates    I tried to use between time but it did not show anything at all. earliest=10/1/2020:00:00:00 latest=01/1/2021:23:59:59 ... View more

Thanks @inventsekar , but it did not group date together by time range, instead, it counts Area separately. Can you give me other solution to count and group areas together by time range? ... View more