All Apps and Add-ons

SPLUNK enterprise i am trying to calculate results where > 4% of failure  is my formula correct , to set anomaly ?

maulik29
Engager

i am trying to calculate results where > 4% of failure  is my formula correct , to set anomaly ? 

| inputlookup  sample.csv | eval isananomaly = if('Failcount' / 'Totalcount' * 100 > 4 ,  1 , 0)

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Because of integer arithmetic, I prefer to use 

| inputlookup  sample.csv | eval isananomaly = if((Failcount * 100 / Totalcount) > 4 ,  1 , 0)
---
If this reply helps you, an upvote would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Because of integer arithmetic, I prefer to use 

| inputlookup  sample.csv | eval isananomaly = if((Failcount * 100 / Totalcount) > 4 ,  1 , 0)
---
If this reply helps you, an upvote would be appreciated.

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!