topic Re: How to add percentages to all the fields? in Splunk Search

How to add percentages to all the fields?

inkedia — Wed, 13 Apr 2022 16:34:50 GMT

| lookup local=true ipasncidr_def CIDR as dest_ip output Organization | lookup src_eonid_name.csv SRC_EONID OUTPUT "SRC_EONID NAME" | top limit=3 "SRC_EONID NAME", dest_ip, dest_port, servicenow, Organization by SRC_EONID | stats values(dest_ip) as "Destination" dc(dest_ip) as "Destination IP count" values(Organization) as "Organization" values(dest_port) as "Dest Ports" values(servicenow) as "Service now Tickets" by "SRC_EONID NAME" SRC_EONID

Hi everyone.
So I have this query that is being saved as dashboard(statistical table.). Is there a way I can include percentages for all the fields captured in the statistical table.

Re: How to add percentages to all the fields?

bowesmana — Thu, 14 Apr 2022 00:15:12 GMT

It looks like you only have 1 numerical field in your output - dc(dest_ip). What would the percentage show that you want and what do you want the percentage to show for the other fields, e.g. Service now Tickets?

Re: How to add percentages to all the fields?

inkedia — Thu, 14 Apr 2022 00:47:19 GMT

This is what I'm trying to achieve

SRC_EON NAME

SRC_EON

Dest IP

Organization

Service now ticket

Dest port

ABA

3311

********* 88.94%

********* 5.12%
********* 3.32%
others

Google
Microsoft

TASK132325 80%

449 100%