Splunk Search

How to display data value in percentage

sebastiangohhy
Engager

Hi there,
Im trying to display the data values in percentage. How can i do it?
Thanks

alt text

Tags (1)
0 Karma
1 Solution

cmerriman
Super Champion

you want Correct to be %Correct=(Correct/(Correct+Wrong)) for example?

try this:

index="cyber_wellness" sourcetype="csv"|chart count over Stage by CorrectAns
|eval %Correct=round((Correct/(Correct+Wrong))*100,2)|eval %Wrong=round((Wrong/(Correct+Wrong))*100,2)
|fields Stage %Correct %Wrong

View solution in original post

cmerriman
Super Champion

you want Correct to be %Correct=(Correct/(Correct+Wrong)) for example?

try this:

index="cyber_wellness" sourcetype="csv"|chart count over Stage by CorrectAns
|eval %Correct=round((Correct/(Correct+Wrong))*100,2)|eval %Wrong=round((Wrong/(Correct+Wrong))*100,2)
|fields Stage %Correct %Wrong

sheamus69
Communicator

You may be able to achieve this using the eventstats command.

See https://answers.splunk.com/answers/9660/stats-count-as-a-percentage-as-the-total.html for an example.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...