Help to convert sql query to splunk query

[sahil237888]

Hi Experts,

Can anyone help me in converting below sql query to splunk query.I really dont have any clue for percentile_cont thing.

SELECT class_id,round(avg(percent/100,2) as percentage,
round(percentile_cont(0.05) within group (order by percent/100),3) as AmarksPerntl,
round(percentile_cont(0.09) within group (order by percent/100),3) as BmarksPerntl
from myTable group by class_id
order by 2 desc

[richgalloway]

You should find some helpful information at http://www.innovato.com/splunk/SQLSplunk.html .

[sahil237888]

@richgalloway, this URL is not working,Not found error while browsing this URL.

[niketn]

@sahil237888 there was an extra dot at the end of the URL because of which it was not working. However, similar document you can also find in the Splunk Documentation link:

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/SQLtoSplunk

[richgalloway]

The link provided by @niketnilay is the one I was looking for, however, so try that.

[Sukisen1981]

nah won't do 🙂 🙂
is it not possible for you to just post a sample of your events and fields and then tell us your expected splunk output?
that way it will be easier for us to come up with a query that fits your needs...