I am having one field and it has 2 values. Comparing them with each other I want to generate a message whether "Success" or "Failure". Below are details: // Search | table _time, ErrorCount | sort 2 _time It gives me result like _time ErrorCount 2-Jan-20 16:35:00 10 2-Jan-20 16:34:00 14 I want to show "Success" if ErrorCount at latestTime < ErrorCount at earliestTime and failure if its otherwise. ... View more

I have 4 panels. 1st Panel gives me Good vs Bad Services stats. 2nd Panel gives me Error Count I want to display 3rd panel if first two Panels looks good(1st Panel - 10 Good Services and 0 Bad Services..... 2nd Panel - 0 ErrorCount) And, i will show 4th panel if first two panels looks otherwise (with an issue). ****Code :: //1st Panel// <table> <search id="dms2"> <query><somesearch>| chart count over Validation by Status</query> <earliest>-24h@h</earliest> <latest>now</latest> <done> <eval token="dms01">false</eval> </done> <progress> <condition match="$result.Good$ < 7"> <set token="dms01">true</set> </condition> </progress> </search> ........ ....... </table> </panel> //2nd panel// <table> <search id="dms3"> <query><somesearch> | fields ErrValidation</query> <earliest>-15m</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> ......... ......... </table> </panel> //3rd Panel// <table> <search id="dms4"> <query>|stats count</query> <earliest>-15m</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="count">10</option> <option name="drilldown">cell</option> <option name="refresh.display">progressbar</option> <format type="color" field="Status"> <colorPalette type="map">{"No Error":#FFFFFF}</colorPalette> </format> </table> </panel> ... View more