file1.csv and file2.csv with a common field of "Tests". Wanting to compare File2 field "Tests" against file1.csv field "Tests" and generate a percentage. Example file1.csv has 4 test vs. file2.csv with 2, generating a percentage of 50%.
| inputlookup file1.csv
| eventstats dc(Tests) as file1_tests_count
| dedup file1_tests_count
| inputlookup append=T file2.csv
| eventstats dc(Tests) as file2_tests_count
| dedup file2_tests_count
| fields file1_tests_count,file2_tests_count
| eval percentage=(file1_tests_count/file2_tests_count*100)
| inputlookup file1.csv
| eventstats dc(Tests) as file1_tests_count
| dedup file1_tests_count
| inputlookup append=T file2.csv
| eventstats dc(Tests) as file2_tests_count
| dedup file2_tests_count
| fields file1_tests_count,file2_tests_count
| eval percentage=(file1_tests_count/file2_tests_count*100)
Hi @Minasdad,
let me understand: you want to display the persentage of the count of lookup2 respect lookup1, is it correct?
I f this is your need, please try this:
| inputlookup file1.csv
| stats count
| eval lookup=file2
| append [
| inputlookup file1.csv
| stats count
| eval lookup=file2
]
| transpose header_field=lookup
| eval perc=round(file2/file1*100,2)
| table perc
Ciao.
Giuseppe