As suggested by Runals, to append results of queries one below another use append
... | stats count by key1 | append [search .... | stats count by key2]
Note - appendcols will append as columns
... View more
This is also very slow! I had to use sampling to get some results.
1. Can someone explain why its slow?
2. Any other suggestions to speed it up?
... View more