@bowesmana  First, Thank you for addressing this issue. I have the basic setup. I am having trouble grouping the servers based on the env. Example: If i have set of servers say server1 server2 server3  which are used for dev for one application abc how can i group, this under one tag i.e abc-dev-servers  so that i can call this during the query or search. and based on this, on selection it should show only logs of these servers(abc-dev-servers). Thats what I'm looking for, when I select app abc and select dev env and access_logs then it should show only the logs of 3servers (under tag abc-dev-servers) First I want to group the servers based on their application and environment, and use it in querying so that the result comes for only those servers.    ... View more

@bowesmana  Appreciate Your help. There are 2 application say abc, xyz which runs on all env's  i.e dev, qa, prod. It has respective servers list.  approx 50 servers in total for both application. and have 2 sourcetype defined one is access_logs and other catalina_logs I need 3 dropdown list  example:  Application(abc,xyz,ALL(option for 2apps))     Environment(dev,qa,prod,ALL(option for all 3 envs))   sourcetype(access_logs,catalina_logs,ALL(option for 2sourcetype))     submit button when I select abc application from 1st dropdown list  then select dev env from 2nd dropdown list and access_logs from 3rd dropdown list  and click submit    then I need to get the results for only those servers from dev env of application abc which contains sourcetype access_logs and show in the panel.  and if we have the option of ALL in the 3 dropdown list and select it and submit , it should show all the 50 servers with 2 sourcetype in the panel. and lets say Application abc has 30 servers 10 for prod 10 for qa  10 for dev can we group the 10 servers with their hostnames ? all the servers have different hostname nothing mentioned in the hostname as these are prod to identify. ... View more

@bowesmana  Lets say we have 2 groups in a team using different tools. Those tools need to be monitor on the same dashboard. tool1 has dev, qa , prod environment tool2 has dev, qa , prod environment and has respective set of servers in them. Which does not contain env in host name.  Both the tools have 2 sourcetype say access_log, catalina_log This will be on event based scenario. On selection of tool1 from 1st drop-down list , env(dev,qa,prod) from 2nd dropdown list, sourcetype from 3rd dropdown list and select submit to show the desired result. ... View more