Individually these searches work:
```#1 sum all values in field repeat_count in all threat logs that are M,H,C severity```
index=FW host=InternetFW sourcetype="fw:threat" severity IN (medium, high, critical) | stats sum(repeat_count) as TotalCount
```#2 sum all repeat_count vailues for the top 10 signatures ```
index=FW host=InternetFW sourcetype="fw:threat" severity IN (medium, high, critical) | stats sum(repeat_count) as Top_10_Threats_per_Day by signature
| sort 10 -Top_10_Threats_per_Day
| stats sum(Top_10_Threats_per_Day) as Top-10
Trying to get the 2 values into a timechart
|timechart span=1d values(TotalCount) as " Total" , values(Top-10) as "Total of top 10"
Tried subsearch {search 1[search 2|fields Top-10]}, Tried multsearch.
... View more