Counting percentage with completion and not completed status

[k31453]

Hi, I have following data:

And I am trying to create SPL which gets me following result:

I tried eventstate and stats command but not getting where i wanted.

[venkatasri]

Hi @k31453 

Following query would help!

index="<your_index>" sourcetype="<sourcetype>" 
| stats count(user) as "Total_Customer", count(eval(all_flag_updated=="yes")) as "updated_flag" , count(eval(all_flag_updated=="no")) as "not_updated_flag" by region 
| eval updated_flag_perc = (updated_flag/Total_Customer) * 100, no_updated_flag_perc = (not_updated_flag/Total_Customer) * 100 
| table Total_Customer updated_flag not_updated_flag updated_flag_perc no_updated_flag_perc region

-------------------------------------------------

An upvote would be appreciated if it helps!