I am trying to get the count of the hit to the particular api and based on the field called execution-time I am calculating SLA ,
Somehow I am able to see the no of requests coming to the api but not able to get the SLA count using below query,
Can some one help me where I am doing wrong in the below query,
index=* uri=validate | eval SLA=1000| stats count as total_calls count(eval(execution-time < SLA)) as sla_compliant_count
Field names with special characters such as hyphens often need to be quoted with single quotes.
index=* uri=validate | eval SLA=1000| stats count as total_calls count(eval('execution-time' < SLA)) as sla_compliant_count