https://community.splunk.com/t5/Splunk-Search/show-precent-of-http-errors/m-p/144712#M40301 <P>Try following</P> <PRE><CODE>&lt;your base search which gives http_status field&gt; | stats count as total, count(eval(tonumber(http_status)&gt;499)) as total499plushttpstatus | eval percHttpStatus499Plus = (total499plushttpstatus*100)/total </CODE></PRE> Fri, 15 Nov 2013 21:18:34 GMT somesoni2 2013-11-15T21:18:34Z https://community.splunk.com/t5/Splunk-Search/show-precent-of-http-errors/m-p/144711#M40300 <P>I saw a decent amount of questions about similar stuff, but i wasnt able to make it happen.</P> <P>I have a field that is http-status and i want the percent of http-status &gt; 499 of total</P> Fri, 15 Nov 2013 19:39:34 GMT https://community.splunk.com/t5/Splunk-Search/show-precent-of-http-errors/m-p/144711#M40300 jrich523 2013-11-15T19:39:34Z https://community.splunk.com/t5/Splunk-Search/show-precent-of-http-errors/m-p/144712#M40301 <P>Try following</P> <PRE><CODE>&lt;your base search which gives http_status field&gt; | stats count as total, count(eval(tonumber(http_status)&gt;499)) as total499plushttpstatus | eval percHttpStatus499Plus = (total499plushttpstatus*100)/total </CODE></PRE> Fri, 15 Nov 2013 21:18:34 GMT https://community.splunk.com/t5/Splunk-Search/show-precent-of-http-errors/m-p/144712#M40301 somesoni2 2013-11-15T21:18:34Z