Splunk Search
Highlighted

## Calculating Kill / Death ratio in a game

Splunk Employee

I'd like to calculate K/D ratio for the game Insurgency.

I have two searches that can calculate #kills and number of deaths #killer

I'd like to calculate the ration of K v. D's.

``````index=insurgency  sourcetype="insurgency" killed
| rex "killed \"(?<killed>.*?)<"
| rex ":\s+\"(?<killer>.*?)<"
| stats count by killer
``````

I'd like the calculate the ration of Kills/Deaths. Any suggestions?

Tags (4)
1 Solution
Highlighted

## Re: Calculating Kill / Death ratio in a game

Legend

Why not

``````index=insurgency  sourcetype="insurgency" killed
| rex "killed \"(?<killed>.*?)<"
| rex ":\s+\"(?<killer>.*?)<"
| stats count by killer killed
| appendpipe [ stats count as deaths by killed | rename killed as user ]
| appendpipe [ stats count as kills by killer | rename killer as user ]
| stats sum(deaths) as deaths sum(kills) as kills by user
| eval ratio=kills/deaths
``````

There may be a better way, but I just can't think of it.

Highlighted

## Re: Calculating Kill / Death ratio in a game

Splunk Employee

Thanks Lisa,
Sadly this didn't work. I will show the output of the search in the next box.

Highlighted

## Re: Calculating Kill / Death ratio in a game

Legend

Found a typo - I have updated the answer above!

Highlighted

## Re: Calculating Kill / Death ratio in a game

Splunk Employee

Splunk all the GAMES LOGS !!!!!!

Highlighted

## Re: Calculating Kill / Death ratio in a game

Splunk Employee

your correction fixed it. nice job thanks!

Highlighted

## Re: Calculating Kill / Death ratio in a game

Splunk Employee

Hey Lisa,
Thanks, here's what that yielded:

Highlighted

## Re: Calculating Kill / Death ratio in a game

SplunkTrust

Try this:

``````  index=insurgency sourcetype=insurgency | rex "killed \"(?<killed>.*?)<"
| rex ":\s+\"(?<killer>.*?)<"  | stats count by killer killed | appendpipe [ stats sum(count) as deaths by killed | rename killed as user ]
| appendpipe [ stats sum(count) as kills by killer | rename killer as user ]| stats sum(deaths) as deaths sum(kills) as kills by user |fillnull value=0
| eval ratio=if(deaths=0, kills,kills/deaths)
``````

OR

`````` index=insurgency sourcetype=insurgency | rex "killed \"(?<killed>.*?)<"
| rex ":\s+\"(?<killer>.*?)<"  | eval Temp=killed.",Death ".killer.",Kill" | makemv Temp| table Temp| mvexpand Temp| rex field=Temp "(?<User>.*),(?<Action>.*)" | chart count over User by Action | eval ratio=if(Death=0, Kill,Kill/Death)
``````
Highlighted

## Re: Calculating Kill / Death ratio in a game

Splunk Employee

both these queries worked. thanks somesoni2! and thanks Lisa !!