I slightly changed the query, as I didn't want to use search. Query ends up with the same results. index=your_index
| stats
values(SUBMITTED_FROM) AS SUBMITTED_FROM
values(STAGE) AS STAGE
BY SESSION_ID
| where SUBMITTED_FROM=startPage STAGE=submit
| stats count BY SESSION_ID
... View more