Hi @k31453
Following query would help!
index="<your_index>" sourcetype="<sourcetype>"
| stats count(user) as "Total_Customer", count(eval(all_flag_updated=="yes")) as "updated_flag" , count(eval(all_flag_updated=="no")) as "not_updated_flag" by region
| eval updated_flag_perc = (updated_flag/Total_Customer) * 100, no_updated_flag_perc = (not_updated_flag/Total_Customer) * 100
| table Total_Customer updated_flag not_updated_flag updated_flag_perc no_updated_flag_perc region
-------------------------------------------------
An upvote would be appreciated if it helps!