All true title aws_account_id stats count by aws_account_id | lookup account_name LinkedAccountId as aws_account_id OUTPUT LinkedAccountName as name | eval title=aws_account_id." (".name.")" | eval title=if(isnull(title),aws_account_id,title) aws_account_id=" " * All title region search $accountId$ | stats count by region, regionLabel | eval title=if(isnull(regionLabel), region, regionLabel) ( ) region=" " OR * All platformLabel platform search $accountId$ $region$ | stats count by platform, platformLabel * All tenancyLabel tenancy search $accountId$ $region$ | stats count by tenancy, tenancyLabel * All instance_type instance_type search $accountId$ $region$ platform="$platform$" tenancy="$tenancy$" | stats count by instance_type ( ) instance_type=" " OR history History Prediction All upfront All upfront Partial upfront No upfront