Dashboards & Visualizations

Survival analysis chart

michelhubert
Engager

I want to display a survival probability chart for churn analysis.
Some background info: http://www.data-miners.com/resources/Customer-Insight-Article.pdf

I have index source with tenureday as field.
I can show a harzard chart (total customers per tenureday)

index=customers| chart count by tenureday

But I want to chart the survival probability.
Therefor I have to calculate a cumulative sum divided by total customers per tenureday.

How?

Tags (2)
0 Karma

michelhubert
Engager

I found a way. I don't know if it's the best way:

index=customers | stats count as daycount by tenureday | sort tenureday | accum daycount as cumsum  | eventstats sum(daycount) as totalz | eval srv = 1 - (cumsum / totalz) | fields tenureday, srv

woodcock
Esteemed Legend

I believe this will work:

index=customers | stats count sum(MyFieldName) AS sum BY tenureday | eval calculation=sum/count
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...