Hi I have the log below.
score
1 10
2 22
3 33
4 36
5 55
Each event has a score range from 0~50
I want to have a cumulative percentage column showing that
greater or equal 40 : 20%
greater or equal 30 : 60%
greater or equal 20 : 80%
greater or equal 10 : 100%
greater or equal 0 : 100%
Try this
... | bin span=10 score | stats count by score | eventstats sum(count) as total | eval percentage=round(count/total, 0)*100 | eval percentage=tostring(percentage, "commas")."%" | replace * WITH "greater or equal to "* IN score | table score percentage