Hi,
I have four options in a drop down--- Highest,Lowest ,Top 5 and Least 5.
Each option has a query:
For example : 'Highest' is based on the query:
index=_internal idx=* source=*license_usage.log type=Usage | eval totalMB = b/1024/1024 | eval totalGB = totalMB /1024 | rename idx as Index | stats sum(totalGB) by Index|rename sum(totalGB) as "License Usage"|sort -"License Usage"|head 1
For example : 'Top 5' is based on the query:
index=_internal idx="*" source=*license_usage.log type=Usage | eval totalMB = b/1024/1024 | eval totalGB = totalMB /1024
| rename idx as Index |stats sum(totalGB) as LicenseUsage by Index |where LicenseUsage >5|sort -LicenseUsage
So, if I select the one option, the results of that particular option and query should come on the panel.
Can you please help me with the code as I have a problem building the exact code to link each search with the associated drop down option.
Thanks,
Bhaskar
... View more