I have a query that calculates a certain value when a particular condition is met.
| eval Other_Failures = Total_requests - (OpFail + FuncFail) | where httpcode!=200
But I'm not getting any events from this. How can I correct this?
Can you please share more details about your search like sample OUTPUT or Event from search before calculation logic ?
KV
It depends on the rest of your search and what you have in your events - one piece of a jigsaw puzzle is not always enough to work out what the picture is 😀