https://community.splunk.com/t5/Splunk-Search/baseline-The-previous-value-minus-the-next-value/m-p/158277#M185859 <P>hi,all<BR /> I want to make a baseline，statistical the success rate.The current time success rate minus the last time success rate, then, divided by the time 60m,all the success rate of such,<IMG src="http://answers.splunk.com//storage/baseline.jpg" alt="alt text" />what should I do?</P> <P>thanks</P> Fri, 09 May 2014 03:46:36 GMT laiyongmao 2014-05-09T03:46:36Z https://community.splunk.com/t5/Splunk-Search/baseline-The-previous-value-minus-the-next-value/m-p/158277#M185859 <P>hi,all<BR /> I want to make a baseline，statistical the success rate.The current time success rate minus the last time success rate, then, divided by the time 60m,all the success rate of such,<IMG src="http://answers.splunk.com//storage/baseline.jpg" alt="alt text" />what should I do?</P> <P>thanks</P> Fri, 09 May 2014 03:46:36 GMT https://community.splunk.com/t5/Splunk-Search/baseline-The-previous-value-minus-the-next-value/m-p/158277#M185859 laiyongmao 2014-05-09T03:46:36Z https://community.splunk.com/t5/Splunk-Search/baseline-The-previous-value-minus-the-next-value/m-p/158278#M185860 <P>Try something like this</P> <PRE><CODE>Your base search giving fields 'Time' and 'rate' | sort Time | streamstats current=f window=1 first(rate) as prevRate | sort -Time | eval baselineRate=round((rate-prevRate)/60,2) </CODE></PRE> Fri, 09 May 2014 14:19:44 GMT https://community.splunk.com/t5/Splunk-Search/baseline-The-previous-value-minus-the-next-value/m-p/158278#M185860 somesoni2 2014-05-09T14:19:44Z