Hello, I am running two separate queries to extract values: First query index=abc status=error | stats count AS FailCount Second query index=abc status=planning | stats count AS TotalPlanned Both queries are working well and giving expected results. When I combine them using sub search, I am getting error: index=abc status=error
| stats count AS FailCount
[ search index=abc status=planning
| stats count AS TotalPlanned
| table TotalPlanned ]
| eval percentageFailed=(FailCount/TotalPlanned)*100 Error message: Error in 'stats' command: The argument '(( TotalPlanned=761 )) is invalid' Note: The count 761 is a valid count for TotalPlanned, so it did perform that calculation.
... View more