Hi @N-W, If you have two fiels, you have to modify your search, because the problem in your search isn't related to the use of base-search, it's in the search! So try to run your search in only one search and debug it; when it will be ok, you'll be able to split it in base search and panels' search. In other words, please debug this search that surely will NOT run: index=Lorem logtype=ipsum enviroment=$env$ | stats count BY status | where statuscode>400 remember that after a "stats" command, you have only the fields used in the command, in your case: count and status. For this reason you cannot use statuscode field, because it isn't available after your stats command. What's your situation: you have status and statuscode and you want to use them together? In this case you could run something like this: index=Lorem logtype=ipsum enviroment=$env$ | eval status=coalesce(status,statuscode) | stats count BY status | where status>400 Or instead you have two fields and you want to use both of them, try something like this: index=Lorem logtype=ipsum enviroment=$env$ | stats values(statuscode) AS statuscode count BY status | where statuscode>400 As I said, debug your search without thinking to base search, then, you'll be able to split it! If you need help share your search (the one you shared in the main question isn't usable). Ciao. Giuseppe ... View more