How to use where command to keep only specific rows?

[summitsplunk]

My query so far looks like this:

sourcetype="type1" OR sourcetype="type2" |chart count(sales1) over sales2 by sourcetype

How would I pipe in | where ..

so that it only keeps rows where the value in type1 is greater than twice the value in type2?

[woodcock · Accepted solution]

Just add:

| where type1 > (2 * type2)