Add this line after your chart line | addtotals | eval Percent=round('200'/Total*100,2) | fields - Total then in your bar chart, select the Format/Chart Overlay and add the Percent as a chart overlay and turn on the extra axis and it will give you a line showing the percentage of 200s against the total of 200s + 403s. If you want the total of all events including other status values, you will need to do it a bit differently. I know you're not using 'success' value, but your  | eval success=if(status=200,1=1,0) should set the success = 1 not 1=1 and that won't be useful Also, if you just want 200s and 403s then it's more efficient to put that search constraint in the first search line.,   ... View more