I am looking to compare the count of transactions processed in a 3 hour window to the count of transactions made in that same timeframe 3 days prior. I would like to set the count of the first search as variable such as count1 and likewise for the second search as count2. Then I could do a comparison to alert when the difference in transactions is outside 20%  (where Count1 <= Count2*0.8 OR Count1 >=Count2*1.2)  My search currently looks like this (It is not functional, so I would love to know how to fix it):       index=sales messageType=AuthPaymentReply earliest=-246h latest=-243h | dedup OrderId | search Status="Success" | stats count by Status as Count1 | search [search index=sales messageType=AuthPaymentReply earliest=3h latest=now | dedup OrderId | search Status="Success" | stats count by Status as Count2] | where Count1 <= Count2*0.8 OR Count1 >=Count2*1.2       ... View more