topic How to plot per_second with eval, will it be count or value? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-plot-per-second-with-eval-will-it-be-count-or-value/m-p/305306#M91644 <P>I'm trying to understand this query:</P> <P>timechart per_second(eval(errorValue&gt;0))</P> <P>Does this plot the value of errorValue itself (greater than 0) per second, or the number of events with errorValue (greater than 0) per second?</P> Thu, 22 Feb 2018 21:09:08 GMT davidch12 2018-02-22T21:09:08Z How to plot per_second with eval, will it be count or value? https://community.splunk.com/t5/Splunk-Search/How-to-plot-per-second-with-eval-will-it-be-count-or-value/m-p/305306#M91644 <P>I'm trying to understand this query:</P> <P>timechart per_second(eval(errorValue&gt;0))</P> <P>Does this plot the value of errorValue itself (greater than 0) per second, or the number of events with errorValue (greater than 0) per second?</P> Thu, 22 Feb 2018 21:09:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-plot-per-second-with-eval-will-it-be-count-or-value/m-p/305306#M91644 davidch12 2018-02-22T21:09:08Z Re: How to plot per_second with eval, will it be count or value? https://community.splunk.com/t5/Splunk-Search/How-to-plot-per-second-with-eval-will-it-be-count-or-value/m-p/305307#M91645 <P>It'll give you count of event, per second, where that eval expression is true, so it the later (from your question).</P> Thu, 22 Feb 2018 22:35:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-plot-per-second-with-eval-will-it-be-count-or-value/m-p/305307#M91645 somesoni2 2018-02-22T22:35:36Z