https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420709#M120885 <P>Assuming you have a table reflecting a column of http codes along with a column of count (as "count"), try the following adding the following to your search query;</P> <P>| eventstats sum(count) as total<BR /> | eval code_per = round((count / total)*100,2)."%"<BR /> | fields - total</P> Wed, 12 Jun 2019 18:31:54 GMT jazzypai 2019-06-12T18:31:54Z https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420708#M120884 <P>I would like to get the percentage of each HTTP status code. I have the count of each status code that appears and I just need a way to divide each code by the total number so I can get the percentage.</P> Wed, 12 Jun 2019 18:01:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420708#M120884 bryceweb22 2019-06-12T18:01:23Z https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420709#M120885 <P>Assuming you have a table reflecting a column of http codes along with a column of count (as "count"), try the following adding the following to your search query;</P> <P>| eventstats sum(count) as total<BR /> | eval code_per = round((count / total)*100,2)."%"<BR /> | fields - total</P> Wed, 12 Jun 2019 18:31:54 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420709#M120885 jazzypai 2019-06-12T18:31:54Z https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420710#M120886 <P>That didn't completely work for me, but I did use the sum(count) as total which gave me what I was looking for. Thanks!</P> Wed, 12 Jun 2019 18:51:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420710#M120886 bryceweb22 2019-06-12T18:51:04Z https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420711#M120887 <P>Copy.</P> <P>If you want to provide more information we can attempt to work further into making sure it works correctly otherwise I'm glad you were able to make it work and if satisfied, please mark answered <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> <P>Have a good day!</P> Wed, 12 Jun 2019 18:56:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-the-percentage-of-each-HTTP-status-code/m-p/420711#M120887 jazzypai 2019-06-12T18:56:33Z