https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595990#M207469 <P>Worked perfectly! thanks</P><P>&nbsp;</P> Fri, 29 Apr 2022 19:15:30 GMT tmtcollins 2022-04-29T19:15:30Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595984#M207467 <P>Hi, I would like to create a chart of the error rate over time.&nbsp; I have data that shows status=&nbsp;DOWNLOAD_COMPLETE&nbsp; and status = FAILD</P> <P>I can calculate this for a point in time with the below. But can anyone help get the error rate over time?</P> <P>&nbsp;</P> <LI-CODE lang="markup"> logType=error OR logType=service context=retrieve status=DOWNLOAD_COMPLETE OR status=FAILED | stats count(correlationId) as total_count by status | transpose header_field=status | eval errorRate=FAILED/(FAILED+DOWNLOAD_COMPLETE)*100 | table DOWNLOAD_COMPLETE, FAILED, errorRate</LI-CODE> <P>&nbsp;</P> Fri, 29 Apr 2022 21:38:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595984#M207467 tmtcollins 2022-04-29T21:38:17Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595989#M207468 <P>This should do it.</P><LI-CODE lang="markup"> logType=error OR logType=service context=retrieve status=DOWNLOAD_COMPLETE OR status=FAILED | timechart count(correlationId) as total_count by status | eval errorRate=FAILED/(FAILED+DOWNLOAD_COMPLETE)*100</LI-CODE> Fri, 29 Apr 2022 19:13:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595989#M207468 richgalloway 2022-04-29T19:13:01Z https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595990#M207469 <P>Worked perfectly! thanks</P><P>&nbsp;</P> Fri, 29 Apr 2022 19:15:30 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-a-chart-of-the-error-rate-over-time/m-p/595990#M207469 tmtcollins 2022-04-29T19:15:30Z