Hey people, my requirement is as such
I have extracted these columns from my data using the query
my query | rex "filterExecutionTime=(?<FET>[^,]+)" | rex "ddbWriteExecutionTime=(?<ddbET>[^)]+)" | rex "EXECUTION_TIME : (?<totalTime>[^ ms]+)" | eval buildAndTearDowTime=(tonumber(FET)) + (tonumber(ddbET)) |table totalTime FET ddbET buildAndTearDownTime
I want to have buildAndTearDown as totalTime - (FET+ ddbET)
once I have all the three values required (FET, ddbET, buildAndTearDown) I want to put these values in a pie chart.
Thanks 😊
Hi @sjs ,
You have a typo in your eval , you are missing n in buildAndTearDown, please try below;
my query
| rex "filterExecutionTime=(?<FET>[^,]+)"
| rex "ddbWriteExecutionTime=(?<ddbET>[^)]+)"
| rex "EXECUTION_TIME : (?<totalTime>[^ ms]+)"
| eval buildAndTearDownTime=(tonumber(FET)) + (tonumber(ddbET))
| table totalTime FET ddbET buildAndTearDownTime
Hey people, Can I get some help
This statement
eval buildAndTearDowTime=(tonumber(FET)) + (tonumber(ddbET))
is giving me null value