topic Add column with percent of sum to chart x over y by z in Splunk Search https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650566#M224915 <P>Hello</P><P>I have the following example:</P><LI-CODE lang="markup">| makeresults count=3 | streamstats count | eval C=(random() % 9) + 1 | eval S1=(random() % 5) + 1 | eval S2=(random() % S1) + 1 | eval Connects=(random() % 5) + 1 | eval Consumer = "Consumer" . C | eval Service = "Service" . S2 | chart count(Consumer) over Consumer by Service | addtotals labelfield=Consumer fieldname=Total | addcoltotals labelfield=Consumer label=Sum</LI-CODE><P>This gives something similar to the following:</P><TABLE border="1" width="100%"><TBODY><TR><TD width="20%" height="24px">Consumer</TD><TD width="20%" height="24px">Service1</TD><TD width="20%" height="24px">Service2</TD><TD width="20%" height="24px">Service3</TD><TD width="20%" height="24px">Total</TD></TR><TR><TD height="24px">Consumer1</TD><TD height="24px">0</TD><TD height="24px">0</TD><TD height="24px">1</TD><TD height="24px">1</TD></TR><TR><TD height="24px">Consumer2</TD><TD height="24px">2</TD><TD height="24px">1</TD><TD height="24px">0</TD><TD height="24px">3</TD></TR><TR><TD height="24px">Consumer5</TD><TD height="24px">0</TD><TD height="24px">1</TD><TD height="24px">0</TD><TD height="24px">1</TD></TR><TR><TD height="24px">Sum</TD><TD height="24px">2</TD><TD height="24px">2</TD><TD height="24px">1</TD><TD height="24px">5</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>Can someone please help me to add a new column with the percentage of "Total" based on the "Sum".</P><P>for example:</P><TABLE border="1" width="474.00000000000006px"><TBODY><TR><TD width="94.7812px">Consumer</TD><TD width="94.6042px">Service1</TD><TD width="94.6042px">Service2</TD><TD width="94.6042px">Service3</TD><TD width="47.3854px">Total</TD><TD width="47.3542px">%</TD></TR><TR><TD width="94.7812px">Consumer1</TD><TD width="94.6042px">0</TD><TD width="94.6042px">0</TD><TD width="94.6042px">1</TD><TD width="47.3854px">1</TD><TD width="47.3542px">20%</TD></TR><TR><TD width="94.7812px">Consumer2</TD><TD width="94.6042px">2</TD><TD width="94.6042px">1</TD><TD width="94.6042px">0</TD><TD width="47.3854px">3</TD><TD width="47.3542px">60%</TD></TR><TR><TD width="94.7812px">Consumer5</TD><TD width="94.6042px">0</TD><TD width="94.6042px">1</TD><TD width="94.6042px">0</TD><TD width="47.3854px">1</TD><TD width="47.3542px">40%</TD></TR><TR><TD width="94.7812px">Sum</TD><TD width="94.6042px">2</TD><TD width="94.6042px">2</TD><TD width="94.6042px">1</TD><TD width="47.3854px">5</TD><TD width="47.3542px">&nbsp;</TD></TR></TBODY></TABLE><P><BR />Please note, the service columns are variable.</P><P>The request is not urgent.</P><P>Thank you and many greetings<BR />Res</P> Fri, 14 Jul 2023 13:49:45 GMT ResB 2023-07-14T13:49:45Z Add column with percent of sum to chart x over y by z https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650566#M224915 <P>Hello</P><P>I have the following example:</P><LI-CODE lang="markup">| makeresults count=3 | streamstats count | eval C=(random() % 9) + 1 | eval S1=(random() % 5) + 1 | eval S2=(random() % S1) + 1 | eval Connects=(random() % 5) + 1 | eval Consumer = "Consumer" . C | eval Service = "Service" . S2 | chart count(Consumer) over Consumer by Service | addtotals labelfield=Consumer fieldname=Total | addcoltotals labelfield=Consumer label=Sum</LI-CODE><P>This gives something similar to the following:</P><TABLE border="1" width="100%"><TBODY><TR><TD width="20%" height="24px">Consumer</TD><TD width="20%" height="24px">Service1</TD><TD width="20%" height="24px">Service2</TD><TD width="20%" height="24px">Service3</TD><TD width="20%" height="24px">Total</TD></TR><TR><TD height="24px">Consumer1</TD><TD height="24px">0</TD><TD height="24px">0</TD><TD height="24px">1</TD><TD height="24px">1</TD></TR><TR><TD height="24px">Consumer2</TD><TD height="24px">2</TD><TD height="24px">1</TD><TD height="24px">0</TD><TD height="24px">3</TD></TR><TR><TD height="24px">Consumer5</TD><TD height="24px">0</TD><TD height="24px">1</TD><TD height="24px">0</TD><TD height="24px">1</TD></TR><TR><TD height="24px">Sum</TD><TD height="24px">2</TD><TD height="24px">2</TD><TD height="24px">1</TD><TD height="24px">5</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>Can someone please help me to add a new column with the percentage of "Total" based on the "Sum".</P><P>for example:</P><TABLE border="1" width="474.00000000000006px"><TBODY><TR><TD width="94.7812px">Consumer</TD><TD width="94.6042px">Service1</TD><TD width="94.6042px">Service2</TD><TD width="94.6042px">Service3</TD><TD width="47.3854px">Total</TD><TD width="47.3542px">%</TD></TR><TR><TD width="94.7812px">Consumer1</TD><TD width="94.6042px">0</TD><TD width="94.6042px">0</TD><TD width="94.6042px">1</TD><TD width="47.3854px">1</TD><TD width="47.3542px">20%</TD></TR><TR><TD width="94.7812px">Consumer2</TD><TD width="94.6042px">2</TD><TD width="94.6042px">1</TD><TD width="94.6042px">0</TD><TD width="47.3854px">3</TD><TD width="47.3542px">60%</TD></TR><TR><TD width="94.7812px">Consumer5</TD><TD width="94.6042px">0</TD><TD width="94.6042px">1</TD><TD width="94.6042px">0</TD><TD width="47.3854px">1</TD><TD width="47.3542px">40%</TD></TR><TR><TD width="94.7812px">Sum</TD><TD width="94.6042px">2</TD><TD width="94.6042px">2</TD><TD width="94.6042px">1</TD><TD width="47.3854px">5</TD><TD width="47.3542px">&nbsp;</TD></TR></TBODY></TABLE><P><BR />Please note, the service columns are variable.</P><P>The request is not urgent.</P><P>Thank you and many greetings<BR />Res</P> Fri, 14 Jul 2023 13:49:45 GMT https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650566#M224915 ResB 2023-07-14T13:49:45Z Re: Add column with percent of sum to chart x over y by z https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650572#M224918 <LI-CODE lang="markup">| eventstats max(Total) as all | eval percent=100*Total/all</LI-CODE> Fri, 14 Jul 2023 14:08:58 GMT https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650572#M224918 ITWhisperer 2023-07-14T14:08:58Z Re: Add column with percent of sum to chart x over y by z https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650574#M224920 <P>So simple <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span><BR />I've spent hours looking through the manuals and found nothing<BR />Thank you very much!</P> Fri, 14 Jul 2023 14:13:19 GMT https://community.splunk.com/t5/Splunk-Search/Add-column-with-percent-of-sum-to-chart-x-over-y-by-z/m-p/650574#M224920 ResB 2023-07-14T14:13:19Z