I will explain more here with some examples. For these two JSON events the first contain the field "SuperForceCouponStatus" but the second don't. Then I made a filter for "SuperForceCouponStatus" as following : <input type="dropdown" token="filter_SuperForce"> <label>SuperForce</label> <choice value="*">ALL</choice> <prefix>SuperForceCouponStatus="</prefix> <suffix>"</suffix> <fieldForLabel>SuperForceCouponStatus</fieldForLabel> <fieldForValue>SuperForceCouponStatus</fieldForValue> <search> <query>|tstats count where index=$filter_index$ $filter_backend$ by SuperForceCouponStatus</query> <earliest></earliest> <latest>now</latest> </search> <default>*</default> </input> After that I made a graph to display the number of events depending on the filters qs following : <panel> <single> <title>Total number of Transactions</title> <search> <query>| tstats count where index=$filter_index$ $filter_backend$ $filter_status$ $filter_SuperForce$ |</query> <earliest>$time_range.earliest$</earliest> <latest>$time_range.latest$</latest> </search> <option name="colorBy">value</option> <option name="colorMode">block</option> <option name="drilldown">none</option> <option name="numberPrecision">0</option> <option name="rangeColors">["0x53a051","0x0877a6","0xf8be34","0xf1813f","0xdc4e41"]</option> <option name="rangeValues">[100,10000,1000000,10000000]</option> <option name="refresh.display">progressbar</option> <option name="showSparkline">1</option> <option name="showTrendIndicator">1</option> <option name="trellis.enabled">0</option> <option name="trellis.scales.shared">1</option> <option name="trellis.size">medium</option> <option name="trendColorInterpretation">standard</option> <option name="trendDisplayMode">absolute</option> <option name="underLabel">transactions</option> <option name="unitPosition">after</option> <option name="useColors">1</option> <option name="useThousandSeparators">1</option> </single> </panel> And the problem is that this graph takes only the events that have the field "SuperForceCouponStatus" because $filter_SuperForce$ is applied in its search string !! Hope the problem is more clear now 🙂
... View more