Solved: How do I divide a columns number by two?

elijahm · ‎08-09-2019

The code belows displays a column showing the amount of times the string "GetPolicy.doPost(56)" occurs. I want to divide this number of occurrences by two and I'm not too sure how to go about doing this. Thanks!

index=client_snsr_tcg_unix_webservices source="/var/log/tomcat8/catalina.out" "GetPolicy.doPost(56)" | stats count(eval(like(_raw,"%GetPolicy.doPost(56)%"))) as "GetPolicy.doPost(56)" by date_month

richgalloway · ‎08-09-2019

Try adding | eval "GetPolicy.doPost(56)" = 'GetPolicy.doPost(56)' / 2 to the end of the query.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway · ‎08-09-2019

Try adding | eval "GetPolicy.doPost(56)" = 'GetPolicy.doPost(56)' / 2 to the end of the query.

---
If this reply helps you, Karma would be appreciated.

How do I divide a columns number by two?

Splunk Observability for AI

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Splunk Observability as Code: From Zero to Dashboard

Are you a member of the Splunk Community?

How do I divide a columns number by two?

Splunk Observability for AI

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Splunk Observability as Code: From Zero to Dashboard