Not getting proper count

VamshiBavu — Wed, 27 Mar 2024 08:00:17 GMT

I am trying to get the count of the hit to the particular api and based on the field called execution-time I am calculating SLA ,

Somehow I am able to see the no of requests coming to the api but not able to get the SLA count using below query,

Can some one help me where I am doing wrong in the below query,

index=* uri=validate | eval SLA=1000| stats count as total_calls count(eval(execution-time < SLA)) as sla_compliant_count

Re: Not getting proper count

ITWhisperer — Wed, 27 Mar 2024 09:05:16 GMT

Field names with special characters such as hyphens often need to be quoted with single quotes.

index=* uri=validate | eval SLA=1000| stats count as total_calls count(eval('execution-time' < SLA)) as sla_compliant_count