https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233380#M69284 <P>HI @iguinn, thank you very much for taking the time to come back to me with this.</P> <P>I needed to make a very minor tweak changing *100 to 1 and it works great.</P> <P>Once many thanks for your help and kind regards</P> <P>Chris</P> Thu, 12 Nov 2015 08:07:21 GMT IRHM73 2015-11-12T08:07:21Z https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233378#M69282 <P>Hi, I wonder whether someone may be able to help me please</P> <P>I'm using the search below to produce the screenshot as shown in the attachment:</P> <PRE><CODE>index=main auditSource=frontend auditType=Survey detail.overall!="None" | replace frontend with "Overall Satisfaction" | rename detail.overall As "Rating" | replace 1 with "Very Satisfied", 2 with "Satisfied", 3 with "Neither", 4 with "Dissatisfied", 5 with "Very Dissatisfied" | chart count by Rating | eval "Rating Score"=case(Rating="Very Satisfied", 100, Rating="Satisfied", 75 , Rating="Neither", 50, Rating="Dissatisfied", 25, Rating="Very Dissatisfied", 0 , 1=1, 0) | addcoltotals | fillnull value="Total" | rename count as "Total Replies" | table "Rating", "Total Replies", "Rating Score" | eval "Rating Calculation" = 'Total Replies' * 'Rating Score' </CODE></PRE> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/821i4C92959FE031AF73/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>I don't even know whether this possible, but what I'd like to do is perform the following calculation using <STRONG>only</STRONG> the "Total" row figures.</P> <P>Rating Calculation / Total Replies and formatted to a percentage with one decimal point.</P> <P>I've spent a couple of days searching the web to see if I can find suitable solutions without any success.</P> <P><STRONG>NB.</STRONG> I will be putting this is a dashboard if it helps.</P> <P>I just wondered whether someone may be able to look at this please and offer some guidance on how I may be able to achieve this.</P> <P>Many thanks and kind regards</P> <P>Chris</P> Thu, 12 Nov 2015 07:24:40 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233378#M69282 IRHM73 2015-11-12T07:24:40Z https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233379#M69283 <P>At the end of your search, add the following line</P> <PRE><CODE>| eval Percentage=if(Rating=="Total",tostring(round('Rating Calculation' *100 / 'Total Replies',1)) + "%",null()) </CODE></PRE> Thu, 12 Nov 2015 07:44:02 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233379#M69283 lguinn2 2015-11-12T07:44:02Z https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233380#M69284 <P>HI @iguinn, thank you very much for taking the time to come back to me with this.</P> <P>I needed to make a very minor tweak changing *100 to 1 and it works great.</P> <P>Once many thanks for your help and kind regards</P> <P>Chris</P> Thu, 12 Nov 2015 08:07:21 GMT https://community.splunk.com/t5/Splunk-Search/How-do-I-edit-my-search-to-calculate-a-percentage-using-values/m-p/233380#M69284 IRHM73 2015-11-12T08:07:21Z