Thanks @yuanliu , your suggestion worked for us. Thanks again. ... View more

Hi @cklunck , thanks for your prompt reply.  Yeah, the solution you suggested worked.  Was wondering can we make the result (aka `stats count`) more granular, like one row shows counts before 20th July 2023 & another row shows counts after.  Should have mentioned this earlier, the `index` is not the only field changed, we also changed `cf_app_name` thus was wondering if those fields can be populated dynamically so it's easier to see results in a more granular level. Thanks.    ... View more

HI @manjunathmeti , that helps. I just need to dissemble your query to understand how it works. ... View more

I came across this answer with a similar situation to solve.  Situation: I created a dropdown with different deployment environments as values, source code like below: <input type="dropdown" token="deploy_env" searchWhenChanged="true"> <label>Deployment Environment</label> <choice value="nonprod">Non Production</choice> <choice value="prod">Production</choice> <default>nonprod</default> </input> I need to query below, namely to have space_name and app_name value depend on $delpy_env$:    index=$deploy_env$ org_name="my_org_name" space_name="spacename_based_on_$deploy_env$" app_name="appname_based_on_$deploy_env$" message_type=OUT | search "Qr Pdf sent to" | stats count Based on answers from this topic, I came up with below solution: index=$deploy_env$org_name="my_org_name" message_type=OUT | eval space_name=case("$deploy_env$" == "nonprod", "spacename-dev", "$deploy_env$" == "spacename-prod", "prod") | eval app_name=case("$deploy_env$" == "nonprod", "serviceappname-dev", "$deploy_env$" == "prod", "serviceappname-prod") | search "Qr Pdf sent to" | stats Count Could anyone check if the solution is correct please and if there are better ways to solve this issue? Thank you.  ... View more