topic Re: How can I calculate Percentage for multiple fields? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625374#M217390 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247676">@punithsj96</a>&nbsp;<BR /><BR />if you can share sample qurey and exepcetd output we can help you furthur</P> Wed, 28 Dec 2022 05:58:49 GMT SanjayReddy 2022-12-28T05:58:49Z How can I calculate Percentage for multiple fields? https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625371#M217389 <P>I am trying to get percentage value fields for multiple fields by time, and fields are dynamic. How can I calculate?&nbsp;<BR /><BR />search&nbsp;| eval Duration=tostring(round(TimeDiff1), "duration")<BR />| chart count over TimeDiff1 by MaterialNumber<BR />| chart sum(*) as * by TimeDiff1 span=300&nbsp;</P><P>my result is:</P><TABLE width="529"><TBODY><TR><TD width="69">TimeDiff1</TD><TD width="115">KM50115007V002</TD><TD width="115">KM51585489V000</TD><TD width="115">KM51585490V000</TD><TD width="115">KM51585494V000</TD></TR><TR><TD>0-300</TD><TD>24</TD><TD>0</TD><TD>2</TD><TD>0</TD></TR><TR><TD>300-600</TD><TD>0</TD><TD>1</TD><TD>0</TD><TD>0</TD></TR><TR><TD>600-900</TD><TD>0</TD><TD>7</TD><TD>0</TD><TD>1</TD></TR><TR><TD>900-1200</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD></TR><TR><TD>1200-1500</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>4</TD></TR><TR><TD>1500-1800</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD></TR><TR><TD>1800-2100</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD></TR><TR><TD>2100-2400</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>1</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>But, I want result in below format.&nbsp;</P><TABLE width="1137"><TBODY><TR><TD width="69">TimeDiff1</TD><TD width="115">KM50115007V002</TD><TD width="115">KM51585489V000</TD><TD width="115">KM51585490V000</TD><TD width="115">KM51585494V000</TD><TD width="152">perc(KM50115007V002)</TD><TD width="152">perc(KM51585489V000)</TD><TD width="152">perc(KM51585490V000)</TD><TD width="152">perc(KM51585494V000)</TD></TR><TR><TD>0-300</TD><TD>24</TD><TD>0</TD><TD>2</TD><TD>0</TD><TD>100</TD><TD>0</TD><TD>100</TD><TD>0</TD></TR><TR><TD>300-600</TD><TD>0</TD><TD>1</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>12.5</TD><TD>0</TD><TD>0</TD></TR><TR><TD>600-900</TD><TD>0</TD><TD>7</TD><TD>0</TD><TD>1</TD><TD>0</TD><TD>87.5</TD><TD>0</TD><TD>16.66666667</TD></TR><TR><TD>900-1200</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD></TR><TR><TD>1200-1500</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>4</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>66.66666667</TD></TR><TR><TD>1500-1800</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD></TR><TR><TD>1800-2100</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>0</TD></TR><TR><TD>2100-2400</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>1</TD><TD>0</TD><TD>0</TD><TD>0</TD><TD>16.66666667</TD></TR></TBODY></TABLE><P>&nbsp;</P> Thu, 29 Dec 2022 04:39:48 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625371#M217389 punithsj96 2022-12-29T04:39:48Z Re: How can I calculate Percentage for multiple fields? https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625374#M217390 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247676">@punithsj96</a>&nbsp;<BR /><BR />if you can share sample qurey and exepcetd output we can help you furthur</P> Wed, 28 Dec 2022 05:58:49 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625374#M217390 SanjayReddy 2022-12-28T05:58:49Z Re: How can I calculate Percentage for multiple fields? https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625375#M217391 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/236694">@SanjayReddy</a>&nbsp;,</P><P>I am attaching pic for you reference. Expected out should come in this form.&nbsp;</P> Wed, 28 Dec 2022 06:10:58 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625375#M217391 punithsj96 2022-12-28T06:10:58Z Re: How can I calculate Percentage for multiple fields? https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625397#M217396 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247676">@punithsj96</a>,</P><P>share your data or searches as text, never as screenshot!</P><P>Anyway, can you share your search?</P><P>Ciao.</P><P>Giuseppe</P> Wed, 28 Dec 2022 08:40:44 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625397#M217396 gcusello 2022-12-28T08:40:44Z Re: How can I calculate Percentage for multiple fields? https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625445#M217405 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;,&nbsp;</P><P>I just updated the question, please kindly check the post.&nbsp;</P> Thu, 29 Dec 2022 04:41:24 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-calculate-Percentage-for-multiple-fields/m-p/625445#M217405 punithsj96 2022-12-29T04:41:24Z