@dicksola Hello, You can combine both the queries and create one single dashboard. Use lookup and map to add your CSV dataset to Splunk fields. You may view the fields and values of your dataset in Splunk after uploading the CSV file. You can now write your query 2 using the |inputlookup or |lookup commands. Subsearch or the append command can then be used to combine your query 2 with your query 1 (index=test* "users").   https://docs.splunk.com/Documentation/Splunk/9.2.0/SearchReference/Append  https://docs.splunk.com/Documentation/Splunk/9.2.0/SearchReference/Lookup  https://docs.splunk.com/Documentation/Splunk/9.2.0/Knowledge/Aboutlookupsandfieldactions    ... View more