1

I have 2 indexes with one field(A) as common in both

Now I want the count of that same field(A) from both indexer in one panel .eg:

indexer 1= total event count of A=30
indexer 2= total event count of A=20

now in a panel i want to show total count of A as 50

warren
  • 32,620
  • 21
  • 85
  • 124

1 Answers1

0

Try the following:

(index=ndxA OR index=ndxB) fieldA=*
| stats count(fieldA) as countA
warren
  • 32,620
  • 21
  • 85
  • 124