Hi
Search
index=index1 word1 AND word2 | stats count as card | appendcols [search index=index1 word1 AND NOT word2 | stats count as mail ]
Result
card mail
123 99
Expected Result
card 123
mail 99
so, i can see the results in a PIE chart
Thanks
nkk
Like this:
index1 word1 OR word2 | stats count(eval(searchmatch("word1 AND word2")) AS card count(eval(searchmatch("word1 AND NOT word2")) AS mail | transpose
Like this:
index1 word1 OR word2 | stats count(eval(searchmatch("word1 AND word2")) AS card count(eval(searchmatch("word1 AND NOT word2")) AS mail | transpose