Here's a starting point for a dashboard, but you'll need to accommodate market weekends, holidays, etc. <form>
<init>
<set token="_time_tok.earliest">-1mon@d-1d</set>
<set token="_time_tok.latest">-1mon@d</set>
</init>
<label>Nasdaq Quotes</label>
<fieldset submitButton="false" autoRun="true">
<input type="time" token="_time_tok" searchWhenChanged="true">
<label></label>
<change>
<condition match="isnum($_time_tok.earliest$) AND isnum($_time_tok.latest$)">
<eval token="_time_earliest_tok">$_time_tok.earliest$</eval>
<eval token="_time_latest_tok">$_time_tok.latest$</eval>
<eval token="_time_minus_1d_earliest_tok">relative_time($_time_tok.earliest$, "-1d")</eval>
<eval token="_time_minus_1d_latest_tok">relative_time($_time_tok.latest$, "-1d")</eval>
<eval token="_time_plus_1d_earliest_tok">relative_time($_time_tok.earliest$, "+1d")</eval>
<eval token="_time_plus_1d_latest_tok">relative_time($_time_tok.latest$, "+1d")</eval>
<eval token="_time_plus_1w_earliest_tok">relative_time($_time_tok.earliest$, "+1w")</eval>
<eval token="_time_plus_1w_latest_tok">relative_time($_time_tok.latest$, "+1w")</eval>
<eval token="_time_plus_1mon_earliest_tok">relative_time($_time_tok.earliest$, "+1mon")</eval>
<eval token="_time_plus_1mon_latest_tok">relative_time($_time_tok.latest$, "+1mon")</eval>
</condition>
<condition>
<eval token="_time_earliest_tok">relative_time(now(), $_time_tok.earliest$)</eval>
<eval token="_time_latest_tok">relative_time(now(), $_time_tok.latest$)</eval>
<eval token="_time_minus_1d_earliest_tok">relative_time(relative_time(now(), $_time_tok.earliest$), "-1d")</eval>
<eval token="_time_minus_1d_latest_tok">relative_time(relative_time(now(), $_time_tok.latest$), "-1d")</eval>
<eval token="_time_plus_1d_earliest_tok">relative_time(relative_time(now(), $_time_tok.earliest$), "+1d")</eval>
<eval token="_time_plus_1d_latest_tok">relative_time(relative_time(now(), $_time_tok.latest$), "+1d")</eval>
<eval token="_time_plus_1w_earliest_tok">relative_time(relative_time(now(), $_time_tok.earliest$), "+1w")</eval>
<eval token="_time_plus_1w_latest_tok">relative_time(relative_time(now(), $_time_tok.latest$), "+1w")</eval>
<eval token="_time_plus_1mon_earliest_tok">relative_time(relative_time(now(), $_time_tok.earliest$), "+1mon")</eval>
<eval token="_time_plus_1mon_latest_tok">relative_time(relative_time(now(), $_time_tok.latest$), "+1mon")</eval>
</condition>
</change>
<default>
<earliest>-1mon@d-1d</earliest>
<latest>-1mon@d</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<title>Top 10 by Volume</title>
<table>
<search>
<query>index=nasdaq_market_activity sourcetype=nasdaq_quotes_csv ((earliest=$_time_minus_1d_earliest_tok$ latest=$_time_minus_1d_latest_tok$) OR (earliest=$_time_earliest_tok$ latest=$_time_latest_tok$) OR (earliest=$_time_plus_1d_earliest_tok$ latest=$_time_plus_1d_latest_tok$) OR (earliest=$_time_plus_1w_earliest_tok$ latest=$_time_plus_1w_latest_tok$) OR (earliest=$_time_plus_1mon_earliest_tok$ latest=$_time_plus_1mon_latest_tok$))
| rex field=source "(?:.*/)?(?<Ticker>[^\.]+)"
| eval Close_Last=ltrim(Close_Last, "$$") ``` my currency is USD, and my locale uses the $$ prefix ```
| rename Close_Last as Close
| eventstats values(eval(case(_time==$_time_minus_1d_earliest_tok$, Close))) as Close-1d values(eval(case(_time==$_time_plus_1d_earliest_tok$, Close))) as Close+1d values(eval(case(_time==$_time_plus_1w_earliest_tok$, Close))) as Close+1w values(eval(case(_time==$_time_plus_1mon_earliest_tok$, Close))) as Close+1mon by Ticker
| where _time==$_time_earliest_tok$
| sort 10 - Volume
| eval "%-Change - 1d"=round(100 * (Close - 'Close-1d') / 'Close-1d', 1)
| eval "%-Change + 1d"=round(100 * ('Close+1d' - Close) / Close, 1)
| eval "%-Change + 1w"=round(100 * ('Close+1w' - Close) / Close, 1)
| eval "%-Change + 1m"=round(100 * ('Close+1mon' - Close) / Close, 1)
| table Ticker "%-Change - 1d" Volume "%-Change + 1d" "%-Change + 1w" "%-Change + 1m"</query>
<earliest>0</earliest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">100</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</form>
... View more