Splunk Search

Calculate ratio for 500's status error

blago
Engager

I would like to get % for 5xx's errors.
How to calculate that?
alt text

Tags (1)
0 Karma

niketn
Legend

@blago, please try the following:

<YourBaseSearch>
| addtotals row=t fieldname="Row_Total"
| eval Perc_5xx=round(('5xx'/Row_Total)*100,2)
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting V2

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...