I need one more help.. I have already specified the multiple values(app1,app2,app3.....)in the token. So I have tried to remove the eval(eval app_name="app1,app2,app3........") command from the Query. but it is returning wrong results. Is this eval command is required? Please suggest me on this. <init>
<set token="app_names">app1,app2,app3................</set>
</init>
......
<row>
<panel>
<title>Dashboard</title>
<table>
<search>
<query>index=idx ns=xyz* app_name IN ($app_names$) pod_container=xyz* ((" ERROR " OR " WARN ")
|stats count by app_name
| append
[| stats count
| eval app_name="app1,app2,app3........"
| table app_name
| makemv app_name delim=","
| mvexpand app_name]
....... Thanks.
... View more