I am trying to run a search over a very large number of events. Because it uses trendline and predict I am only able to output the results one at a time for each change in field foo. I would like to run the search repeatedly with a table of results at the end with the result of the search for each value in foo Unfortunately I can only combine the results into a single value or run the search individually for each different foo. This is time consuming and frankly not repeatable, which is required. I was looking at the map command and hoping it would provide me with a method of doing what I am doing. Any help is appreciated. Below is a masked version of the search I am running and I have bolded the fields that will change. index=summary_index sourcetype=summary_data NAME=Device1 SECTOR="1" | timechart sum(eval(BBH_L_Thrp_bits_DL_Avg/8/1024/1024/1024)) span=1w as Bits |trendline sma10(Bits) as Bits_AVG |predict Bits_AVG algorithm=LLP5 future_timespan=52 holdback=38 |rename prediction(Bits_AVG) as Prediciton_Accuracy | eval Model_variance=((Bits_AVG - Prediciton_Accuracy)/Bits_AVG*100) | stats max(Model_variance) min(Model_variance) ... View more