I have created a dashboard in Splunk with two panels. The first panel runs a search (query below) for time-window-1 and the second panel runs the same search for time-windows-2.
