Hi @gcusello ,  Apologies, in an attempt to anonymize my search earlier I have made some errors, which have made it seem confusing, so this is the corrected code with other variable so that maybe it would be easier to understand my dilemma. | mstats span=1m earliest(monitor) AS first latest(monitor) AS last max(monitor) AS max WHERE index=organizationmetric AND internal_name="SR01" | autoregress last AS lastlast | eval diff = if(first = lastlast, 0,if(first-lastlast<0,0,first-lastlast)) | eval divmaxlast = round(max-last,0) | eval meter = round(if(max=last,last-first,if(last<max,if(divmaxlast<2,last-first,max-first+last),max-first+last))) + diff | eval date=strftime(_time,"%Y-%m-%V") | timechart span=1w sum(meter) AS output the other metric names are "SR02" "SR03" "SR04" Thanks and sorry again for the confusion ... View more

Hi @gcusello , thanks for the prompt reply, however, using the IN function in the first line leads to the search summing up the results at the beginning, but my search actually consists of intermediate calculations before arriving at the "Var" variable, and this method causes the final summation to be inaccurate. As such, I'm wondering if there is a way to sum up the final results only.  Thanks! ... View more

Hi @gcusello , I made some edits to your suggestion, and have come up with satisfiable results, thank you. ... View more

Hi Giuseppe, thank you for the reply.  My search is roughly along these lines ... | timechart span=8h aligntime=@d+7h sum(meter) AS "output"  | eval date=strftime(_time,"%H:%M") | eval shift = case(date="07:00","A", date="15:00","B", date="23:00","C") | eval "output" = 'output' + " " + shift ... View more