All Apps and Add-ons

SPLUNK enterprise i am trying to calculate results where > 4% of failure  is my formula correct , to set anomaly ?

maulik29
Engager

i am trying to calculate results where > 4% of failure  is my formula correct , to set anomaly ? 

| inputlookup  sample.csv | eval isananomaly = if('Failcount' / 'Totalcount' * 100 > 4 ,  1 , 0)

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Because of integer arithmetic, I prefer to use 

| inputlookup  sample.csv | eval isananomaly = if((Failcount * 100 / Totalcount) > 4 ,  1 , 0)
---
If this reply helps you, an upvote would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Because of integer arithmetic, I prefer to use 

| inputlookup  sample.csv | eval isananomaly = if((Failcount * 100 / Totalcount) > 4 ,  1 , 0)
---
If this reply helps you, an upvote would be appreciated.

View solution in original post

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.