index=acs-app-log sourcetype=iccim_bwm_servicename processname=response_AM
|stats count by verificationstatus
Results:
| verificationstatus | count |
| Failed | 100 |
| Success | 230 |
| pending | 456 |
i need to get the percentage of failed success and pending.
how can i do that?
Might be a better way but im still learning too.
Give this a try after your search
| stats count as total by verificationstatus
| eventstats sum(total) as gTotal
| eval percentage = round (( total / gTotal)*100,2)
| sort -percentage
| table verificationstatus, total, gTotal, percentage
Might be a better way but im still learning too.
Give this a try after your search
| stats count as total by verificationstatus
| eventstats sum(total) as gTotal
| eval percentage = round (( total / gTotal)*100,2)
| sort -percentage
| table verificationstatus, total, gTotal, percentage
perfect!!! Thank you @sjringo , i got the expected result.