SPLUNK enterprise i am trying to calculate results where > 4% of failure is my formula correct , to set anomaly ?

[maulik29]

i am trying to calculate results where > 4% of failure  is my formula correct , to set anomaly ? 

| inputlookup  sample.csv | eval isananomaly = if('Failcount' / 'Totalcount' * 100 > 4 ,  1 , 0)

[richgalloway · Accepted solution]

Because of integer arithmetic, I prefer to use 

| inputlookup  sample.csv | eval isananomaly = if((Failcount * 100 / Totalcount) > 4 ,  1 , 0)