https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701443#M237934 <LI-CODE lang="markup">| bin span=10m _time | stat count by _time | stats count(eval(count&gt;=10)) as count10plus count as total | eval percent=100*count10plus/total</LI-CODE> Wed, 09 Oct 2024 15:27:14 GMT ITWhisperer 2024-10-09T15:27:14Z https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701441#M237933 <P>Hi all,</P> <P>New to splunk, running out of ideas, please help!</P> <P>I have created a search to show:</P> <LI-CODE lang="markup">| bin span=10m _time | stat count by _time</LI-CODE> <P>This gives me two columns - the time interval in 10 minutes bins, and the number of results within that bin.</P> <P>What I would like to do is expand on this search and show the % of bins over a time range that have &gt; =10 results&nbsp;</P> <P>&nbsp;</P> <P>cheers</P> Wed, 09 Oct 2024 17:43:08 GMT https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701441#M237933 tp29 2024-10-09T17:43:08Z https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701443#M237934 <LI-CODE lang="markup">| bin span=10m _time | stat count by _time | stats count(eval(count&gt;=10)) as count10plus count as total | eval percent=100*count10plus/total</LI-CODE> Wed, 09 Oct 2024 15:27:14 GMT https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701443#M237934 ITWhisperer 2024-10-09T15:27:14Z https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701510#M237955 <P>That works perfectly.<BR />Thank you very much&nbsp;<span class="lia-unicode-emoji" title=":folded_hands:">🙏</span></P> Thu, 10 Oct 2024 08:01:51 GMT https://community.splunk.com/t5/Splunk-Search/percent-of-results-per-bin/m-p/701510#M237955 tp29 2024-10-10T08:01:51Z