I am working on adding a panel to a dashboard which already has 5 panels. Here is the hierarchy, TimeRangePicker | Pulldown | Switcher | NullModule(5) | GenericHeader(6) | search(6) | JobProgressIndicator|Pager | Table And here is my Advanced XML for the 6th Panel <module name="GenericHeader" layoutPanel="panel_row6_col1"> <param name="label">... </param> <module name="Search"> <param name="search"><![CDATA[ index=... sourcetype=... Exception | rex ".*?( ?(?:\w+\.)+\w*?Exception).*"| stats count by Exception|sort &#8211;count ]]> <module name="JobProgressIndicator" /> <module name="Pager"> <module name="Table"> <module name="ConvertToDrilldownSearch"> <module name="ViewRedirector"> <param name="viewTarget">flashtimeline</param> </module> <!-- ViewRedirector --> </module> <!-- ConvertToDrilldownSearch --> </module> <!-- Table --> </module> <!-- Pager --> </module> <!-- Search --> </module> <!-- GenericHeader --> Current Result : Waiting for search to finish... Expected Result: Panel with Results Note: All other 5 panels are working. Thank you. ... View more

I am trying to calculate the average number of errors by calculating events(with error)/total events. Here is my query ...| stats count(_raw) as Total| appendcols[search .... error|rex "(?i)^[^\\.]*\\.\\w+:\\s+(?P.+)"|stats count as errors by FIELDNAME ]|eval average = errors/Total|sort -errors Result: FIELDNAME | errors | Total| average ================================ abc 10 def 2 ghi 2 30 0.0666 jkl 1 mno 1 Expected Result FIELDNAME errors Total average ================================ abc 10 30 3.3 def 2 30 0.66 ghi 2 30 0.0666 jkl 1 30 0.33 mno 1 30 0.33 my question is why total is not calculated for all the events? what logic I am missing here. Thank you so much. ... View more