Give this a try |mstats count(_value) as count WHERE (metric_name="*metric1*" OR metric_name="*metric2*") AND metric_type=c AND status="success" by metric_name,env,status | eval temp=env."#".status | eval metric_name=if(match(metric_name,"metric1"),"metric1","metric2") | chart values(count) over temp by metric_name | WHERE metric1>0 AND metric>0   OR  |mstats count(_value) as count1 WHERE metric_name="*metric1*" AND metric_type=c AND status="success" by metric_name,env,status | appendcols [|mstats count(_value) as count2 WHERE metric_name="*metric2*" AND metric_type=c AND status="success" by metric_name,env,status] | where count1>0 AND count2>0 ... View more