fetch bizevents, from:-30m
| summarize search_events = countIf(event.type == "com.easytravel.search-journey"), by:dt.entity.host
| lookup [fetch logs
| summarize count = countIf(loglevel=="ERROR"), by:dt.entity.host
], sourceField:dt.entity.host, lookupField:dt.entity.host, prefix:"logs.err."
fetch dt.entity.host
| filter entityId == "HOST-29627D3DC19AD2DA"
| lookup [fetch events
| filter event.kind == "DAVIS_PROBLEM" and in(affected_entity, "HOST-29627D3DC19AD2DA")
| summarize count=count(), by:{dt.entity.host="HOST-29627D3DC19AD2DA"}
], sourceField:entityId, lookupField:dt.entity.host, prefix:"problems."
| lookup [fetch logs, from:-1h
| summarize err=countIf(loglevel=="ERROR"), by:dt.entity.host
], sourceField:entityId, lookupField:dt.entity.host, prefix:"logs."