https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696282#M236652 <P>Thanks, it worked! All I have to do is convert it to a percentage and we're all good to go. I'll pass along the karma.</P> Wed, 14 Aug 2024 14:29:07 GMT OgoNARA 2024-08-14T14:29:07Z https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696272#M236645 <P>Hi,</P> <P>&nbsp;</P> <P>So, I got an issue where I have a log and the log has a field called ERROR_MESSAGES for each event that ends in an error. The other events that have a NULL value under ERROR_MESSAGES are successful events. So, I'm trying to get a percentage of the successful events over the total events. Ths is the query I built but when I run the search success rate comes back with no percentage value and I know there's 338/3190 successful events. Any help would go along way I've been struggling I feel like my SPL is getting better but man this one has me scratching my head.</P> <LI-CODE lang="markup">| inputlookup fm4143_3d.csv | stats count(FLOW_ID) as total | appendpipe [| inputlookup fm4143_3d.csv | where isnull(ERROR_MESSAGE) | stats count as success] | eval success_rate = ((success/total)*100) | fields success_rate</LI-CODE> <P>&nbsp;</P> Wed, 14 Aug 2024 13:39:13 GMT https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696272#M236645 OgoNARA 2024-08-14T13:39:13Z https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696276#M236648 <P>Try something like this</P><LI-CODE lang="markup">| inputlookup fm4143_3d.csv | stats count(FLOW_ID) as total count(ERROR_MESSAGE) as fail | eval success = total - fail | eval success_rate = 100 * success/total | fields success_rate</LI-CODE> Wed, 14 Aug 2024 13:38:33 GMT https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696276#M236648 ITWhisperer 2024-08-14T13:38:33Z https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696282#M236652 <P>Thanks, it worked! All I have to do is convert it to a percentage and we're all good to go. I'll pass along the karma.</P> Wed, 14 Aug 2024 14:29:07 GMT https://community.splunk.com/t5/Splunk-Search/I-want-to-find-the-percentage-of-success-rate-over-the-total/m-p/696282#M236652 OgoNARA 2024-08-14T14:29:07Z