Exactly what I was looking for. I haven't come across the streamstats term yet so this is great. Thank you! ... View more

Thanks for this. The results of this don't seem to "Add up" every hour. I was hoping each hour the number would be greater, but it seems to be giving different numbers, if that makes sense. ... View more

Sorry for the late response, I just noticed your response. I added that to my Source and when I change to all I still have No Results Found in the panels where I would like to see all hosts stats. Ideally every host would be represented in the graphs. ... View more

Here is the code up to the point where I believe it errors <input type="time" searchWhenChanged="true" token="global_time_tok"> <label>Time Range</label> <default> <earliest>-1h</earliest> <latest>now</latest> </default> </input> <input type="dropdown"> <label>Time Span</label> <choice value="auto">auto</choice> <choice value="5s">5s</choice> <choice value="10s">10s</choice> <choice value="30s">30s</choice> <choice value="1m">1m</choice> <choice value="5m">5m</choice> <choice value="10m">10m</choice> <choice value="30m">30m</choice> <choice value="1h">1h</choice> <default>auto</default> <change> <eval token="timechart_span">if($value$ == "auto", "", "span=".$value$)</eval> <eval token="mstats_span">"span=".$value$</eval> </change> </input> <input type="dropdown" token="env" searchWhenChanged="true"> <label>Environment</label> <choice value="n">UAT</choice> <choice value="p">PRD</choice> <default>p</default> </input> <input type="dropdown" token="service"> <label>Service</label> <choice value="ap">Application</choice> <choice value="hc">Hazelcast</choice> <choice value="db">Database</choice> <choice value="mw">Middleware</choice> </input> <input type="dropdown" token="host" searchWhenChanged="true"> <label>Host</label> <default>All</default> <fieldForLabel>hostfield</fieldForLabel> <fieldForValue>host</fieldForValue> <search> <query>index="xxx-*-wineventlog" host=xx$env$01xx-$service$* | stats count by host</query> <earliest>-24h@h</earliest> <latest>now</latest> </search> <change> <eval token="host">if($host$ == "All", "xx$env$01xx-$service$*", $host$)</eval> </change> Above the graphs I have a panel with text which host is selected. And below that are various infrastructure monitoring graphs for that host. When I select ALL from the host drop down, I want all hosts in that specific Environment and Service that I previously selected in the drop downs before it. Currently when I select all the panel with the hostname changes to xx$env$01xx-$service$* ... View more