Solved: How do I divide a columns number by two?

elijahm · ‎08-09-2019

The code belows displays a column showing the amount of times the string "GetPolicy.doPost(56)" occurs. I want to divide this number of occurrences by two and I'm not too sure how to go about doing this. Thanks!

index=client_snsr_tcg_unix_webservices source="/var/log/tomcat8/catalina.out" "GetPolicy.doPost(56)" | stats count(eval(like(_raw,"%GetPolicy.doPost(56)%"))) as "GetPolicy.doPost(56)" by date_month

richgalloway · ‎08-09-2019

Try adding | eval "GetPolicy.doPost(56)" = 'GetPolicy.doPost(56)' / 2 to the end of the query.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway · ‎08-09-2019

Try adding | eval "GetPolicy.doPost(56)" = 'GetPolicy.doPost(56)' / 2 to the end of the query.

---
If this reply helps you, Karma would be appreciated.

How do I divide a columns number by two?

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Join the Conversation

How do I divide a columns number by two?

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...