Stats aggregation with potentially a eval-where clause is ideal

I am trying to work a set of data that looks like this: ![alt text][1] I want to display it like so: ![alt text][2] My problem is getting the mv list of failed sessionIds. I wish we had something like `stats count(eval(status_code=200)) as success_count values(sessionId(eval(where(status_code>200)))) by req_method` Appreciate any suggestions to achieve this with reasonable simplicity. [1]: /storage/temp/274735-sample-data.png [2]: /storage/temp/274736-sample-data-output.png